CVE-2020-17417: 
Foxit PDF Reader vulnerability analysis and mitigation

This vulnerability (CVE-2020-17417) affects Foxit Reader version 10.0.1.35811. The vulnerability allows remote attackers to execute arbitrary code on affected installations. User interaction is required to exploit this vulnerability, specifically requiring the target to visit a malicious page or open a malicious file (Zero Day Initiative).

The specific flaw exists within the handling of the Annotation objects. The vulnerability stems from the lack of validating the existence of an object prior to performing operations on the object. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is classified as a Use After Free (CWE-416) issue (Zero Day Initiative, NVD).

An attacker can leverage this vulnerability to execute code in the context of the current process. The vulnerability affects confidentiality, integrity, and availability of the system, with all three impact metrics rated as High according to the CVSS score (Zero Day Initiative).

The vulnerability requires user interaction to exploit, where the target must visit a malicious page or open a malicious file. The attack complexity is considered Low, and no privileges are required to execute the attack (Zero Day Initiative).

Foxit has released security updates to address this vulnerability. Users should update their installations to the latest version. The fix is available through the vendor's security bulletin (Foxit Security Bulletin).