CVE-2023-51549: 
Foxit PDF Reader vulnerability analysis and mitigation

CVE-2023-51549 is a security vulnerability affecting Foxit PDF Reader that was disclosed on December 20, 2023. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. The vulnerability specifically affects multiple versions of the software including versions 2024.3.0.26795 and earlier on Windows platforms (ZDI Advisory).

The vulnerability exists within the handling of Doc objects in Foxit PDF Reader. The specific flaw results from the lack of validating the existence of an object prior to performing operations on the object, leading to a Use-After-Free condition. The vulnerability has been assigned a CVSS score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating its high severity (ZDI Advisory).

An attacker can leverage this vulnerability to execute arbitrary code in the context of the current process. The exploitation requires user interaction, specifically the target must visit a malicious page or open a malicious file (ZDI Advisory).

The vulnerability requires user interaction to be exploited, where the target must visit a malicious page or open a malicious file. The attack complexity is considered low, requiring no special privileges for exploitation (ZDI Advisory).

Foxit has released security updates to address this vulnerability. Users are advised to update their applications to the latest version. For Version 2023.1 and higher, users can update by clicking on 'Help' > 'About Foxit PDF Reader' > 'Check for Update'. Alternatively, users can download the updated version directly from the Foxit website (Foxit Security Bulletin).