CVE-2020-8857: 
Foxit PDF Reader vulnerability analysis and mitigation

CVE-2020-8857 is a remote code execution vulnerability discovered in Foxit Reader version 9.7.0.29455. The vulnerability was reported on December 11, 2019, and publicly disclosed on February 11, 2020. This security flaw affects the parsing of form Annotation objects within AcroForms in Foxit Reader (ZDI Advisory, NVD).

The vulnerability is classified as a Use-After-Free issue within the parsing of form Annotation objects within AcroForms. The specific flaw stems from the application's failure to validate the existence of an object prior to performing operations on it. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD, ZDI Advisory).

If successfully exploited, this vulnerability allows attackers to execute arbitrary code in the context of the current process. The high CVSS score reflects the significant potential impact on system confidentiality, integrity, and availability (ZDI Advisory).

Foxit has released security updates to address this vulnerability. Users are advised to update their Foxit Reader installations to the latest version. The fix is available through the vendor's security bulletin (Vendor Advisory, ZDI Advisory).