Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value which allows remote attackers to execute arbitrary code via a crafted Publisher file aka \Publisher Return Value Validation Vulnerability.\