I just read the MS16-087 security bulletin and the articles by Vectra (who apparently discovered the vulnerability). As I understand it, MS Point and Print offered a delivery of print drivers from a printer or print server without UAC query to user.
I am concerned about a colleague using a Windows 7 Professional computer without the patch, but don't want to update that system unless absolutely required because it is running a critical business application that I don't want destabilized by Microsoft shenanigans (e.g., Win 10 forced updates).
It is a single workstation with directly attached printer (USB cable). They use Internet for business only, e.g., email, business related websites.
They are running Kaspersky AV and firewall.
If I warn them to be especially cautious about not visiting websites without business validation and even then to be cautious about printing from a web page, would they be unlikely to be hit?
It seems to me you would need to go to an Internet watering hole attack vector and agree to print or accept a printer driver to be hit with malware related to this vector. The internal network is only accessible to a DSL router with firewall.