CVE-2020-8850: 
Foxit PDF Reader vulnerability analysis and mitigation

CVE-2020-8850 is a vulnerability discovered in Foxit Reader affecting the processing of JPEG2000 files. The vulnerability was reported on October 17, 2019, and publicly disclosed on February 11, 2020. This security flaw affects Foxit Reader installations and requires user interaction to be exploited (ZDI Advisory).

The vulnerability stems from the lack of proper validation of user-supplied data during the processing of JPEG2000 files, which can result in a write past the end of an allocated structure. The vulnerability has been assigned a CVSS v3.1 score of 7.8 (High) with the vector string AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (ZDI Advisory).

If successfully exploited, this vulnerability allows attackers to execute arbitrary code in the context of the current process. The attack requires user interaction, specifically opening a malicious file or visiting a malicious page (ZDI Advisory).

Foxit has released an update to address this vulnerability. Users are advised to update their Foxit Reader installations to the latest version available through the official Foxit support website (ZDI Advisory, Foxit Security).