A high-severity memory corruption vulnerability in Foxit PDF software allows for potential arbitrary code execution when processing specially crafted PDF forms containing JavaScript.

The application is susceptible to a use-after-free (CWE-416) condition when JavaScript modifies a PDF form. This flaw permits an attacker to influence memory state, which can be leveraged for code execution if the user is induced to open a malicious document.

With a CVSS score of 7.8, this vulnerability represents a severe threat to business continuity and data security. Exploitation could allow an attacker to execute commands with the privileges of the logged-in user, potentially leading to unauthorized access to sensitive files or lateral movement within the network.

Immediate Action: Apply the latest security updates provided by Foxit to all affected installations of PDF Editor and Reader.

Proactive Monitoring: Review endpoint security logs for signs of anomalous memory usage or unauthorized process spawning linked to the PDF reader.

Compensating Controls: Utilize security software to enforce restrictive policies on PDF viewer settings, specifically disabling JavaScript execution where business requirements allow.

Public Exploit Available: false

The risk associated with this vulnerability is significant, as it provides a path for remote code execution. Security teams must ensure that all instances of Foxit PDF software are updated immediately upon the availability of a patch to neutralize this attack vector.