CVE-2020-8849: 
Foxit PDF Reader vulnerability analysis and mitigation

CVE-2020-8849 is a vulnerability discovered in Foxit Reader affecting the processing of JPEG2000 files. The vulnerability was disclosed on February 11, 2020, and affects Foxit Reader installations. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure (ZDI Advisory).

The vulnerability has been assigned a CVSS v3.0 score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating a high severity issue. The specific flaw exists within the processing of JPEG2000 files and manifests as an out-of-bounds write condition due to improper validation of user-supplied data (ZDI Advisory).

An attacker who successfully exploits this vulnerability can execute arbitrary code in the context of the current process. The vulnerability requires user interaction, as the target must visit a malicious page or open a malicious file for the exploit to be successful (ZDI Advisory).

Foxit has issued an update to correct this vulnerability. Users are advised to update their installations to the latest version through the vendor's security bulletins page (ZDI Advisory).