← All advisories

Moderate severityNVD Advisory· Published Jan 6, 2015· Updated Jun 17, 2026

CVE-2014-9527

CVE-2014-9527

Description

HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cause a denial of service (infinite loop and deadlock) via a crafted PPT file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.apache.poi:poiMaven	< 3.11	3.11

Affected products

3

Apache/Poi
cpe:2.3:a:apache:poi:*:beta3:*:*:*:*:*:*
Range: <=3.11
Fedoraproject/Fedora
cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
ghsa-coords
pkg:maven/org.apache.poi/poi
Range: < 3.11

Patches

Vulnerability mechanics

References

9

github.com/advisories/GHSA-x9mm-6gpf-f749ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2014-9527ghsaADVISORY
lists.fedoraproject.org/pipermail/package-announce/2015-February/150228.htmlnvdWEB
poi.apache.org/changes.htmlnvdWEB
secunia.com/advisories/61953nvdWEB
www-01.ibm.com/support/docview.wssnvdWEB
access.redhat.com/errata/RHSA-2016:1135nvdWEB
issues.apache.org/bugzilla/show_bug.cginvdWEB
www.securityfocus.com/bid/77726nvd

News mentions

0

No linked articles in our index yet.