CVE-2020-17416: 
Foxit PDF Reader vulnerability analysis and mitigation

CVE-2020-17416 is a remote code execution vulnerability discovered in Foxit Reader version 10.0.0.35798. The vulnerability was disclosed on October 13, 2020, and affects the JPEG2000 image parsing functionality. User interaction is required to exploit this vulnerability, as the target must visit a malicious page or open a malicious file (Zero Day Initiative).

The vulnerability exists within the parsing of JPEG2000 images in Foxit Reader. The specific flaw results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. This out-of-bounds write vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD, Zero Day Initiative).

An attacker can leverage this vulnerability to execute arbitrary code in the context of the current process. The successful exploitation could lead to complete compromise of the affected system, with the same privileges as the user running the Foxit Reader application (Zero Day Initiative).

Foxit has released security updates to address this vulnerability. Users should update their Foxit Reader installations to the latest version. The fix was included in version 10.0.1.35811 and later releases (Foxit Security Bulletin).