CVE-2020-13807: 
NixOS vulnerability analysis and mitigation

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. The vulnerability (CVE-2020-13807) involves circular reference mishandling that causes a loop. The vulnerability was disclosed and patched in 2020, affecting multiple versions of Foxit's PDF software products (NVD).

The vulnerability is classified as an infinite loop vulnerability (CWE-835: Loop with Unreachable Exit Condition). It has a CVSS v3.1 Base Score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, and a CVSS v2.0 Base Score of 5.0 (MEDIUM) with the vector string AV:N/AC:L/Au:N/C:N/I:N/A:P (NVD).

The vulnerability affects system availability by causing an infinite loop condition. When exploited, it can lead to a denial of service situation, potentially making the application unresponsive (NVD).

The vulnerability is network-accessible (AV:N) with low attack complexity (AC:L) and requires no privileges (PR:N) or user interaction (UI:N). This makes it relatively straightforward to exploit, though no known exploits in the wild have been reported (NVD).

The vulnerability was addressed in Foxit Reader and PhantomPDF version 9.7.2. Users of affected versions should upgrade to version 9.7.2 or later to mitigate this security issue (NVD).