CVE-2024-30365: 
Foxit PDF Reader vulnerability analysis and mitigation

A remote code execution vulnerability (CVE-2024-30365) has been identified in Foxit PDF Reader. The vulnerability exists within the handling of AcroForms and stems from the application's failure to validate the existence of an object before performing operations on it. This use-after-free vulnerability was discovered and reported through the Zero Day Initiative (ZDI Advisory).

The vulnerability is classified as a Use-After-Free (CWE-416) issue that occurs during the processing of AcroForms in Foxit PDF Reader. It has been assigned a CVSS v3.0 base score of 7.8 (HIGH) with the vector string CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability specifically manifests when the application performs operations on an object without properly validating its existence (ZDI Advisory).

If successfully exploited, this vulnerability allows attackers to execute arbitrary code in the context of the current process. The high CVSS score indicates that successful exploitation could lead to complete compromise of the system's confidentiality, integrity, and availability, though user interaction is required (ZDI Advisory).

The vulnerability requires user interaction for exploitation, specifically the target must visit a malicious page or open a malicious file. The attack complexity is considered low, requiring no privileges, but does need user interaction to trigger the vulnerable code path (ZDI Advisory).

Foxit has released security updates to address this vulnerability. Users are advised to update their Foxit PDF Reader to the latest version. The fix is included in the security updates available in Foxit PDF Reader 2024.4 and Foxit PDF Editor 2024.4/13.1.5 (Foxit Security Bulletin).