Microsoft won’t patch a vulnerability in an older product because creating a fix was “infeasible” Office XP, which debuted in March 2001, remains on Microsoft’s list of supported suites. Microsoft urged Office XP users to download and run an automated tool from its “Fit it” library. The tool, said Microsoft, “provides similar protections against the vulnerability” as the patch offered to people running Office 2003 and Office 2007. Microsoft used the same rationale last September as it did Tuesday to explain why it isn’t patching.”]
Source: https://www.csoonline.com/article/2125203/ms-leaves-some-office-xp-users-patchless.html