In reply to Andy.

Hi Andy,

Thanks for reading our blog. I think you can rest easy. Windows XP is not affected by CVE-2014-4114. I believe the earliest version of Windows to contain this OLE packager vulnerability is Vista SP2.

Sincerely,
Jaeson Schultz