CVE-2014-9527

medium

Apache

CVSS v3 Base Score

5.0

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS Score

1.2%

Exploitation probability in 30 days

Top 21% most likely to be exploited

Attack Characteristics

Attack Vector

Network

Attack Complexity

Low

Confidentiality

None

Integrity

None

Availability

Published: January 6, 2015 (4146 days ago)

Last Modified: May 6, 2026

Vendor: Apache

Source: NVD

Description

HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cause a denial of service (infinite loop and deadlock) via a crafted PPT file.

CWE-399

fedoraproject fedoraapache poi