CVE-2020-8847: 
Foxit PDF Reader vulnerability analysis and mitigation

CVE-2020-8847 is a remote code execution vulnerability affecting Foxit Reader version 9.7.0.29455. The vulnerability was discovered and reported through the Zero Day Initiative (ZDI) program, identified as ZDI-CAN-9414, and was publicly disclosed on February 11, 2020 (ZDI Advisory).

The vulnerability exists within the processing of JPEG2000 files and results from the lack of proper validation of user-supplied data, which can lead to a write past the end of an allocated structure. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is classified as CWE-787 (Out-of-bounds Write) (NVD).

If successfully exploited, this vulnerability allows attackers to execute arbitrary code in the context of the current process. The high CVSS score indicates that successful exploitation could lead to complete compromise of the system's confidentiality, integrity, and availability, though user interaction is required (ZDI Advisory).

Foxit has released security updates to address this vulnerability. Users are advised to update their installations to the latest version through the vendor's official website or through the application's built-in update mechanism (Foxit Security).