CVE-2024-9253: 
Foxit PDF Reader vulnerability analysis and mitigation

Foxit PDF Reader contains an out-of-bounds read information disclosure vulnerability (CVE-2024-9253) that affects AcroForm handling. The vulnerability was discovered and reported to Foxit, with public disclosure occurring on September 26, 2024. This security flaw affects multiple versions of Foxit PDF Reader and Foxit PDF Editor on Windows platforms (ZDI Advisory, Foxit Bulletin).

The vulnerability exists within the handling of AcroForms and stems from inadequate validation of user-supplied data, which can result in a read past the end of an allocated buffer. The issue has been assigned a CVSS v3.1 base score of 3.3 (Low) with the vector string AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N by Zero Day Initiative, while NIST assigned a higher CVSS score of 7.1 (High) with vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H (ZDI Advisory).

The vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. An attacker can leverage this vulnerability in conjunction with other vulnerabilities to potentially execute arbitrary code in the context of the current process (ZDI Advisory).

User interaction is required to exploit this vulnerability, specifically the target must visit a malicious page or open a malicious file. The vulnerability was reported to Foxit on June 26, 2024, and was publicly disclosed on September 26, 2024 (ZDI Advisory).

Foxit has released security updates to address this vulnerability. Users are advised to update to the latest versions of affected products. For Version 2023.1 and higher, users can update by clicking on 'Help' > 'About Foxit PDF Reader' or 'About Foxit PDF Editor' > 'Check for Update'. Alternatively, users can download the updated version directly from the Foxit website (Foxit Bulletin).