CVE-2020-8848: 
Foxit PDF Reader vulnerability analysis and mitigation

This vulnerability (CVE-2020-8848) affects Foxit Reader version 9.7.0.29455. The vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability as the target must visit a malicious page or open a malicious file (Zero Day Initiative).

The vulnerability exists within the processing of JPG2000 images. The specific flaw results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. The vulnerability has a CVSS v3.1 base score of 7.8 (HIGH) with the vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD).

An attacker can leverage this vulnerability to execute code in the context of the current process. The successful exploitation could lead to complete compromise of the affected system, allowing the attacker to execute arbitrary code with the same privileges as the current user (Zero Day Initiative).

Foxit has issued an update to correct this vulnerability. Users should update their installations to the latest version of Foxit Reader. The fix is available through the vendor's security bulletin (Zero Day Initiative).