CVE-2021-34972: 
Foxit PDF Reader vulnerability analysis and mitigation

CVE-2021-34972 is a Use-After-Free Information Disclosure vulnerability affecting Foxit PDF Reader's AcroForm processing functionality. The vulnerability was discovered by ZhangJiaxing from Codesafe Team of Legendsec at Qi'anxin Group and was publicly disclosed on October 15, 2021. The vulnerability affects Foxit PDF Reader installations and has been assigned a CVSS score of 3.3 (ZDI Advisory).

The vulnerability exists within the processing of AcroForms in Foxit PDF Reader. The specific flaw stems from the application's failure to validate the existence of an object prior to performing operations on it. This Use-After-Free condition can lead to information disclosure. The vulnerability has been assigned a CVSS v3 score of 3.3 with the following vector: AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N (ZDI Advisory).

The vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. While the impact is limited to information disclosure, the advisory notes that attackers could potentially leverage this vulnerability in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process (ZDI Advisory).

User interaction is required to exploit this vulnerability, as the target must visit a malicious page or open a malicious file. The vulnerability requires local access with low attack complexity, and no privileges are required to execute the attack (ZDI Advisory).

Foxit has released an update to correct this vulnerability. Users are advised to update their Foxit PDF Reader installations to the latest version through the application's update mechanism or by downloading the latest version from the Foxit website (ZDI Advisory).