Microsoft Publisher 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect memory handling aka \Publisher Memory Corruption Vulnerability.\