CVE-2023-51556: 
Foxit PDF Reader vulnerability analysis and mitigation

CVE-2023-51556 is a Use-After-Free vulnerability discovered in Foxit PDF Reader affecting the AcroForm Doc object handling. The vulnerability was disclosed on December 20, 2023, and affects Foxit PDF Reader versions 2024.3.0.26795 and earlier on Windows platforms (Foxit Security Bulletin, ZDI Advisory).

The vulnerability exists within the handling of Doc objects in Foxit PDF Reader. The specific flaw results from the lack of validating the existence of an object prior to performing operations on the object. The vulnerability has been assigned a CVSS v3.0 base score of 7.8 (High) with the vector string: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (ZDI Advisory).

If successfully exploited, this vulnerability allows remote attackers to execute arbitrary code in the context of the current process on affected installations of Foxit PDF Reader. The vulnerability can lead to complete system compromise with the privileges of the current user (ZDI Advisory).

User interaction is required to exploit this vulnerability, as the target must visit a malicious page or open a malicious file. The vulnerability was reported to Foxit on October 3, 2023, and was publicly disclosed on December 20, 2023 (ZDI Advisory).

Foxit has released security updates to address this vulnerability. Users are advised to update to the latest version of Foxit PDF Reader. The update can be installed by clicking on 'Help' > 'About Foxit PDF Reader' > 'Check for Update' or by downloading the latest version from the Foxit website (Foxit Security Bulletin).