CVE-2021-34973: 
Foxit PDF Reader vulnerability analysis and mitigation

CVE-2021-34973 is a Use-After-Free vulnerability discovered in Foxit PDF Reader that affects the PDF file parsing functionality. The vulnerability was disclosed on October 15, 2021, and has been assigned a CVSS score of 3.3 (Low severity). This vulnerability affects Foxit PDF Reader installations and requires user interaction to be exploited (ZDI Advisory).

The vulnerability exists within the parsing of PDF files and results from the lack of validating the existence of an object prior to performing operations on the object. This issue could lead to information disclosure through improper object handling (ZDI Advisory).

The vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. While the direct impact is limited to information disclosure, attackers could potentially leverage this vulnerability in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process (ZDI Advisory).

This vulnerability requires user interaction to be exploited, specifically the target must visit a malicious page or open a malicious file. The attack complexity is considered low, but requires local access and user interaction (ZDI Advisory).

Foxit has released an update to correct this vulnerability. Users are advised to update their Foxit PDF Reader installations to the latest version available through the vendor's website (ZDI Advisory).