This web page screenshot contains the following key vulnerability information: Vulnerability Title: Foxit Reader addAnnot Use-After-Free Remote Code Execution Vulnerability Vulnerability ID: ZDI-17-897 CVE ID: CVE-2017-16586 Severity Score: CVSS 6.8 Affected Vendor: Foxit Affected Product: Reader Vulnerability Details: + This vulnerability allows the execution of arbitrary code on certain versions of Foxit Reader when a user interacts with malicious content. + The flaw exists in the addAnnot method and is caused by the lack of object existence validation. + An attacker can exploit this vulnerability to execute code in the context of the current process. Additional Information: + Foxit has released a fix for this issue. + Details about the update are available at the given URL. Disclosure Timeline: + 2017-10-11: Vulnerability reported to the vendor. + 2017-11-14: Public release of coordinated advisory. Credit: bit from meepwn team