CVE-2023-51559: 
Foxit PDF Reader vulnerability analysis and mitigation

CVE-2023-51559 is a vulnerability discovered in Foxit PDF Reader that was disclosed on December 20, 2023. This vulnerability affects the handling of Doc objects within Foxit PDF Reader installations. The issue was initially reported to the vendor on October 3, 2023, and was subsequently fixed in Foxit PDF Reader version v2023.2 (ZDI Advisory).

The vulnerability stems from an out-of-bounds read condition in the handling of Doc objects within Foxit PDF Reader. The specific flaw results from the lack of proper validation of user-supplied data, which can lead to a read past the end of an allocated buffer. The vulnerability has been assigned a CVSS v3.0 base score of 3.3 (Low) with the vector string CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N, indicating local access requirements and low impact (ZDI Advisory).

If successfully exploited, this vulnerability allows attackers to execute arbitrary code in the context of the current process. However, the impact is somewhat mitigated by the requirement for user interaction, as the target must visit a malicious page or open a malicious file for the exploit to be successful (ZDI Advisory).

The vulnerability requires user interaction for successful exploitation. An attacker would need to convince a target to either visit a malicious webpage or open a specially crafted malicious file. The local access requirement and necessary user interaction add some complexity to exploitation (ZDI Advisory).

The vulnerability has been fixed in Foxit PDF Reader version v2023.2. Users are advised to update to this version or later to mitigate the risk (ZDI Advisory).