CVE-2020-8846: 
Foxit PDF Reader vulnerability analysis and mitigation

This vulnerability (CVE-2020-8846) affects Foxit PhantomPDF version 9.6.0.25114. The vulnerability allows remote attackers to execute arbitrary code on affected installations. User interaction is required to exploit this vulnerability as the target must visit a malicious page or open a malicious file (Zero Day Initiative, NVD).

The specific flaw exists within the handling of text field objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 HIGH with the vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is classified as a Use-After-Free (CWE-416) issue (Zero Day Initiative, NVD).

An attacker can leverage this vulnerability to execute code in the context of the current process, potentially gaining the same privileges as the targeted application. The vulnerability affects confidentiality, integrity, and availability of the system, all rated as High in the CVSS scoring (Zero Day Initiative).

Foxit has issued an update to correct this vulnerability. Users should update to the latest version of the software through the vendor's website or through the application's update mechanism (Zero Day Initiative).