CVE-2020-8851: 
Foxit PDF Reader vulnerability analysis and mitigation

CVE-2020-8851 is a remote code execution vulnerability affecting Foxit Reader version 9.7.0.29455. The vulnerability was discovered and reported through the Zero Day Initiative (ZDI-CAN-9406) and was publicly disclosed on February 11, 2020. This security flaw affects the processing of JPG2000 images in Foxit Reader, allowing remote attackers to execute arbitrary code on affected installations (Zero Day Initiative).

The vulnerability exists within the processing of JPEG2000 images and stems from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated structure, classified as an Out-of-bounds Write (CWE-787). The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (High), with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD).

A successful exploitation of this vulnerability could allow attackers to execute arbitrary code in the context of the current process. The high CVSS score indicates that the vulnerability can lead to a complete compromise of the system's confidentiality, integrity, and availability (Zero Day Initiative).

Foxit has issued an update to correct this vulnerability. Users are advised to update their installations to the latest version of Foxit Reader. The fix is available through the vendor's security bulletin (Foxit Security Bulletin).