CVE-2024-30331: 
Foxit PDF Reader vulnerability analysis and mitigation

A remote code execution vulnerability (CVE-2024-30331) was identified in Foxit PDF Reader. The vulnerability exists within the handling of Doc objects in AcroForms and requires user interaction to exploit, such as visiting a malicious page or opening a malicious file (Zero Day Initiative).

The vulnerability stems from the lack of validating the existence of an object prior to performing operations on the object in AcroForms, leading to a Use-After-Free condition. The vulnerability has been assigned a CVSS v3.0 base score of 7.8 HIGH with the vector string CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating high severity with local access requirements and user interaction (Zero Day Initiative).

If successfully exploited, this vulnerability allows attackers to execute arbitrary code in the context of the current process on affected installations of Foxit PDF Reader (Zero Day Initiative).

The vulnerability requires user interaction for successful exploitation, specifically requiring the target to visit a malicious page or open a malicious file. The attack vector is local, with low attack complexity and no privileges required (Zero Day Initiative).

Foxit has released security updates to address this vulnerability. Users are advised to update their Foxit PDF Reader installations to the latest version. The fix is available through the application's update feature or can be downloaded from the Foxit website (Foxit Security Bulletins).