CVE-2023-51550: 
Foxit PDF Reader vulnerability analysis and mitigation

CVE-2023-51550 is a vulnerability discovered in Foxit PDF Reader that was disclosed on December 20, 2023. This vulnerability affects the handling of combobox fields in Foxit PDF Reader installations. The vulnerability was identified and reported through the Zero Day Initiative (ZDI) program as ZDI-CAN-21870 (ZDI Advisory).

The vulnerability is classified as an Out-Of-Bounds Read Information Disclosure vulnerability. The specific flaw exists within the handling of combobox fields and results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. The vulnerability has been assigned a CVSS v3.0 base score of 3.3 (LOW) with the vector string: AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N (ZDI Advisory).

The vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. An attacker can leverage this vulnerability in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process (ZDI Advisory).

Foxit has released security updates to address this vulnerability. Users are advised to update their Foxit PDF Reader installations to the latest version. The fix is available through the application's update mechanism or can be downloaded from the Foxit website (Foxit Security Bulletin).