A critical use-after-free vulnerability in Foxit PDF Editor and Reader could allow an attacker to achieve code execution through a specially crafted PDF document.

This is a use-after-free vulnerability (CWE-416) triggered when the application processes a PDF file. The vulnerability requires user interaction to open the malicious file, but once opened, an unauthenticated attacker could potentially gain control of the application process.

Successful exploitation of this vulnerability could lead to arbitrary code execution on the host system, potentially resulting in data exfiltration, unauthorized access to sensitive documents, or complete system compromise. With a CVSS score of 7.8, this vulnerability is classified as High severity, as it poses a significant risk to the integrity and confidentiality of end-user workstations.

Immediate Action: Update Foxit PDF Editor and Reader to the latest available versions released by the vendor to patch the underlying memory corruption issue.

Proactive Monitoring: Monitor endpoint logs for abnormal application crashes or unexpected child processes spawned by the PDF reader.

Compensating Controls: Restrict the ability of PDF readers to execute scripts or access network resources via endpoint security policies until patches are applied.

Public Exploit Available: false

Given the severity of use-after-free vulnerabilities in document processing software, organizations should prioritize deploying the latest vendor updates across all workstations. Users should be advised to exercise caution when opening unsolicited PDF files from untrusted sources.