CVE-2020-8855: 
Foxit PDF Reader vulnerability analysis and mitigation

CVE-2020-8855 is a Use-After-Free vulnerability affecting Foxit PhantomPDF version 9.7.0.2947. The vulnerability was discovered and reported to Foxit in November 2019 and publicly disclosed on February 11, 2020. This security flaw affects the fxhtml2pdf.exe module of the software and requires user interaction to be exploited (ZDI Advisory).

The vulnerability exists within the fxhtml2pdf.exe module and stems from the lack of validation for object existence before performing operations on it. The issue has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is classified as CWE-416 (Use After Free) (NVD).

If successfully exploited, this vulnerability allows attackers to execute arbitrary code in the context of the current process. The high CVSS score indicates that successful exploitation could lead to complete compromise of confidentiality, integrity, and availability of the affected system (ZDI Advisory).

Foxit has released security updates to address this vulnerability. Users are advised to update their installations to the latest version of the software. The fix was made available through Foxit's security bulletin (Foxit Security).