CVE-2020-13806: 
NixOS vulnerability analysis and mitigation

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2, identified as CVE-2020-13806. The vulnerability is characterized by a use-after-free condition that occurs due to JavaScript execution after a deletion or close operation (NVD). The vulnerability was disclosed on June 4, 2020, affecting multiple versions of Foxit's PDF software products (AttackerKB).

The vulnerability has been assigned a CVSS v3 Base Score of 7.5, indicating a high severity level. The attack vector is network-based, requires low attack complexity, needs no privileges, and requires no user interaction. The vulnerability primarily impacts system availability (AttackerKB).

The use-after-free vulnerability can lead to system crashes and potentially allow attackers to execute remote code on affected systems. The primary impact is on system availability, with no direct impact on confidentiality or integrity (NVD).

The vulnerability is considered highly exploitable due to its network-based attack vector, low attack complexity, and no requirement for privileges or user interaction (AttackerKB).

Users are advised to update their Foxit Reader and PhantomPDF installations to version 9.7.2 or later to address this vulnerability (Security Tracker).