CVE-2023-38117: 
Foxit PDF Reader vulnerability analysis and mitigation

Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability (CVE-2023-38117) was discovered and disclosed on June 7, 2023, with a public release on July 26, 2023. This vulnerability affects Foxit PDF Reader installations and requires user interaction to exploit, specifically requiring the target to visit a malicious page or open a malicious file (Zero Day Initiative).

The vulnerability exists within the handling of Doc objects in Foxit PDF Reader. The specific flaw results from the lack of validating the existence of an object prior to performing operations on the object. The vulnerability has been assigned a CVSS v3.0 base score of 7.8 (HIGH) with the vector string: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is classified as CWE-416 (Use After Free) (Zero Day Initiative).

An attacker can leverage this vulnerability to execute arbitrary code in the context of the current process. The successful exploitation could lead to complete compromise of the affected system with the same privileges as the current user (Zero Day Initiative).

Foxit has released security updates to address this vulnerability. Users are advised to update their Foxit PDF Reader installations to the latest version. The fix is available through the application's update mechanism or can be downloaded directly from Foxit's website (Foxit Security Bulletins).