CVE-ZOMBIE: the Word vulnerability that refuses to die

CVE-2012-0158 allocated in 2011, patched in 2012, still being actively exploited in 2016: the question is why?