CVE-2024-9256: 
Foxit PDF Reader vulnerability analysis and mitigation

Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability (CVE-2024-9256) is a security flaw discovered in Foxit PDF Reader. The vulnerability was reported on November 22, 2024, and affects multiple versions of Foxit PDF Reader and Foxit PDF Editor on Windows platforms, including versions up to 2024.2.3.25184 (NVD, ZDI Advisory).

The vulnerability exists within the handling of AcroForms and stems from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer. The vulnerability has been assigned a CVSS v3.1 base score of 7.1 HIGH by NIST (Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H), while Zero Day Initiative rates it at 3.3 LOW (Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N). The vulnerability is classified as CWE-125 (Out-of-bounds Read) (NVD).

The vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. An attacker can leverage this vulnerability in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process (ZDI Advisory).

User interaction is required to exploit this vulnerability, specifically the target must visit a malicious page or open a malicious file. The attack requires local access with low attack complexity, and no privileges are needed (ZDI Advisory).

Foxit has released security updates to address this vulnerability. Users are advised to update to the latest versions of the affected software. For Version 2023.1 and higher, users can update by clicking on 'Help' > 'About Foxit PDF Reader' or 'About Foxit PDF Editor' > 'Check for Update'. Alternatively, users can download the updated version directly from the Foxit website (Foxit Security Bulletin).