Microsoft Publisher 2003 SP3 2007 SP3 and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers incorrect pointer handling aka \Publisher Pointer Handling Vulnerability.\