CVE-2014-9527 Medium Severity Vulnerability detected by WhiteSource

[mend-bolt-for-github]

CVE-2014-9527 - Medium Severity Vulnerability

Vulnerable Library - poi-3.8.jar

Apache POI - Java API To Access Microsoft Format Files

path: /root/.m2/repository/org/apache/poi/poi/3.8/poi-3.8.jar,2/repository/org/apache/poi/poi/3.8/poi-3.8.jar

Library home page: http://poi.apache.org/

Dependency Hierarchy:

• ❌ poi-3.8.jar (Vulnerable Library)

Found in HEAD commit: 23068bfa8fba8e934988efafc64fa2cf0fdb8462

Vulnerability Details

HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cause a denial of service (infinite loop and deadlock) via a crafted PPT file.

Publish Date: 2015-01-06

URL: CVE-2014-9527

CVSS 2 Score Details (5.0)

Base Score Metrics not available

Suggested Fix

Type: Change files

Origin: apache/poi@21d2bc3

Release Date: 2014-12-07

Fix Resolution: Replace or update the following files: TestBugs.java, HSLFSlideShow.java, 57272_corrupted_usereditatom.ppt

---

Step up your Open Source Security Game with WhiteSource here