Moderate severityNVD Advisory· Published Jan 6, 2015· Updated May 6, 2026
CVE-2014-9527
CVE-2014-9527
Description
HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cause a denial of service (infinite loop and deadlock) via a crafted PPT file.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.poi:poiMaven | < 3.11 | 3.11 |
Affected products
2- cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- github.com/advisories/GHSA-x9mm-6gpf-f749ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2014-9527ghsaADVISORY
- lists.fedoraproject.org/pipermail/package-announce/2015-February/150228.htmlnvdWEB
- poi.apache.org/changes.htmlnvdWEB
- secunia.com/advisories/61953nvdWEB
- www-01.ibm.com/support/docview.wssnvdWEB
- access.redhat.com/errata/RHSA-2016:1135nvdWEB
- issues.apache.org/bugzilla/show_bug.cginvdWEB
- www.securityfocus.com/bid/77726nvd
News mentions
0No linked articles in our index yet.