The comment surely meant a scenario where the presentation file itself, claiming to tell us about something else, happens to be a PDF exploit that attacks the audience of readers, not that the presentation is about such a vulnerability.