CVE-2024-9254: 
Foxit PDF Reader vulnerability analysis and mitigation

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVE-2024-9254) was discovered and disclosed on November 22, 2024. This vulnerability affects multiple versions of Foxit PDF Reader and Foxit PDF Editor on both Windows and macOS platforms, including versions up to Foxit PDF Reader 2024.2.2.64388 for macOS and 2024.2.3.25184 for Windows (NVD, ZDI Advisory).

The vulnerability exists within the handling of Annotation objects in Foxit PDF Reader. The specific flaw stems from the application's failure to validate the existence of an object prior to performing operations on it. The vulnerability has been assigned a CVSS v3.1 base score of 8.8 HIGH (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) by NIST NVD, while Zero Day Initiative rates it at 7.8 HIGH (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) (NVD, ZDI Advisory).

If successfully exploited, this vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. The attacker can leverage this vulnerability to execute code in the context of the current process, potentially leading to complete system compromise (ZDI Advisory).

The vulnerability requires user interaction to be exploited, specifically the target must visit a malicious page or open a malicious file. The attack vector is considered low complexity, requiring no privileges but does need user interaction (ZDI Advisory).

Foxit has released security updates to address this vulnerability. Users are advised to update their applications to the latest versions. For Version 2023.1 and higher, users can update by clicking on 'Help' > 'About Foxit PDF Reader/Editor' > 'Check for Update'. Alternatively, users can download the updated version directly from the Foxit website (Foxit Security Bulletin).