CVE-2023-42096: 
Foxit PDF Reader vulnerability analysis and mitigation

CVE-2023-42096 is a security vulnerability affecting Foxit PDF Reader that was disclosed on September 12, 2023. The vulnerability allows remote attackers to execute arbitrary code on affected installations of the software. User interaction is required to exploit this vulnerability, as the target must visit a malicious page or open a malicious file (ZDI Advisory).

The vulnerability exists within the parsing of PDF files and has been assigned a CVSS score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The specific flaw results from the lack of validating the existence of an object prior to performing operations on the object. This issue is classified as a Use-After-Free vulnerability (ZDI Advisory).

An attacker can leverage this vulnerability to execute code in the context of the current process on affected systems. The successful exploitation requires user interaction, such as opening a malicious file or visiting a malicious page (ZDI Advisory).

The vulnerability requires user interaction to be exploited, specifically the target must visit a malicious page or open a malicious file. The attack complexity is considered low, and no special privileges are required to execute the attack (ZDI Advisory).

Foxit has issued an update to correct this vulnerability. Users are advised to update their installations to the latest version of the software to protect against this security issue (ZDI Advisory).