CVE-2024-7723: 
Foxit PDF Reader vulnerability analysis and mitigation

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (CVE-2024-7723) is a security flaw discovered in Foxit PDF Reader and Foxit PDF Editor. The vulnerability was reported on April 17, 2024, and publicly disclosed on August 13, 2024. This vulnerability affects multiple versions of Foxit PDF Reader and Foxit PDF Editor on Windows platforms, including versions up to 2024.2.3.25184 (ZDI Advisory, Foxit Bulletin).

The vulnerability exists within the handling of AcroForms in Foxit PDF Reader and Editor. The specific flaw results from the lack of validating the existence of an object prior to performing operations on the object. The vulnerability has been assigned a CVSS v3.1 base score of 8.8 HIGH (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) by NIST NVD, while Zero Day Initiative assigned it a score of 7.8 HIGH (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) (NVD).

If successfully exploited, this vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader and Editor. The attacker can leverage this vulnerability to execute code in the context of the current process, potentially gaining control over the affected system (ZDI Advisory).

User interaction is required to exploit this vulnerability, specifically the target must visit a malicious page or open a malicious file. The vulnerability can be triggered through specially crafted PDF documents containing malformed AcroForm elements (ZDI Advisory).

Foxit has released security updates to address this vulnerability. Users are advised to update to the latest versions of their respective products. For Foxit PDF Reader and Editor (Version 2023.1 and higher), users can update by clicking on 'Help' > 'About Foxit PDF Reader/Editor' > 'Check for Update'. Alternatively, users can download the latest version directly from the Foxit website (Foxit Bulletin).