but will need a specifically crafted file and use social engineering methods (observed in this campaign) to convince a user to open it
What's next, "Zero-day Impacting All Versions of All Operating Systems - allows users to download and execute arbitrary code"? I suppose if you're a fan of user-hostile walled-garden trusted-computing models you might consider that a vulnerability, but I think it's safe to assume that most people consider the ability to "download and execute arbitrary code" to be a very useful and fundamental feature of an OS.
from Vista SP2 to Windows 8.1
I'm curious if this "vulnerability" also exists in XP.