Launchpad.net

CVE 2014-9527

HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cause a denial of service (infinite loop and deadlock) via a crafted PPT file.

See the CVE page on Mitre.org for more details.