CVE-2020-17414: 
Foxit PDF Reader vulnerability analysis and mitigation

The vulnerability (CVE-2020-17414) affects Foxit Reader version 10.0.0.35798. This local privilege escalation vulnerability was discovered in 2020, with the disclosure timeline spanning from June 12, 2020 (reported to vendor) to October 9, 2020 (advisory update). The vulnerability exists within the handling of configuration files used by the Foxit Reader Update Service (Zero Day Initiative).

The vulnerability has a CVSS score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The specific flaw exists within the handling of the configuration files used by the Foxit Reader Update Service. The issue results from incorrect permissions set on a resource used by the service (Zero Day Initiative).

An attacker can leverage this vulnerability to escalate privileges and execute code in the context of SYSTEM. The vulnerability requires the attacker to first obtain the ability to execute low-privileged code on the target system (Zero Day Initiative).

The vulnerability requires local access and low privileges to exploit. An attacker must first obtain the ability to execute low-privileged code on the target system before they can exploit this vulnerability (Zero Day Initiative).

Foxit has issued an update to correct this vulnerability. Users should update their Foxit Reader installations to the latest version to mitigate this security risk (Zero Day Initiative).