Foxit Reader V9.7.2
Historically, v9.7.2 sits right before the massive CVE-2022-28672 and the "Follina"-esque template injection attacks. In this build, the Launch action and URI handling were functional but not yet locked down. A clever adversary could embed a file:// URI that points to an SMB share, forcing NetNTLMv2 hash leaks—a technique that was textbook in 2020-2021 red team engagements.
Note: This feature is often available in the 'Organize' tab in the full version or as a trial feature in the free reader.
Let’s start with the visceral experience. If you install v9.7.2 on a Windows 7 or 10 LTSC machine today, the first thing you notice is velocity. Unlike the current Electron-based bloat or Adobe’s perpetual sluggishness, Foxit 9.7.2 is ferociously fast.
This was the last era where Foxit felt like a tool rather than a platform. It still had the classic ribbon UI that didn't force you into a cloud subscription.
Released: March 31, 2020
Foxit Software released Foxit Reader version 9.7.2 as a maintenance and security update to its widely-used PDF reader. While later versions (Foxit 10, 11, and 12) have since introduced new interfaces and cloud features, version 9.7.2 remains notable for users who prefer a classic layout or work on legacy Windows systems.
After v9.7.2, Foxit released multiple security advisories. Critical vulnerabilities affecting v9.7.2 include:
| CVE ID | CVSS Score | Description |
|--------|-------------|-------------|
| CVE-2021-21831 | 7.8 (High) | Use-after-free in the JavaScript Doc.gotoNamedDest() method → Remote Code Execution (RCE). |
| CVE-2021-21832 | 7.8 (High) | Use-after-free in the this.print() JavaScript method. |
| CVE-2021-21833 | 7.8 (High) | Heap buffer overflow in the AcroForm annotation handling. |
| CVE-2020-17410 | 8.8 (High) | Use-after-free in this.submitForm() leading to RCE. |
| CVE-2020-15913 | 8.1 (High) | Arbitrary file write via improper validation of the XFDF export path. |
📌 Note: Foxit fixed these only in versions 10.x and later. No patches were backported to 9.7.x. foxit reader v9.7.2
Most users do not upgrade software for fun. They do so out of necessity. Here is why a significant number of enterprises and individuals refuse to move past Foxit Reader v9.7.2.
Foxit Reader 9.7.2 served as a reliable, security-hardened update for the 9.x branch in early 2020. While stable and lightweight, it is now obsolete and unsafe for daily use on internet-connected machines. For legacy system compatibility, it may still function offline, but users should plan to upgrade to a supported release or switch to an alternative such as SumatraPDF (lightweight) or the latest Foxit Reader.
Reference: Foxit Software official release notes – March 2020; CVE database entries for Q1 2020.
Foxit Reader v9.7.2 User Guide
Foxit Reader is a lightweight, fast, and feature-rich PDF viewer. Version 9.7.2 is a legacy version (released around 2019) that introduced several UI updates and feature enhancements compared to earlier v9 builds.
Note: Because this is an older version, some modern security features or cloud integrations present in the current Foxit version (2024+) may not be available or may no longer be supported.
Here is a comprehensive guide on how to use the core features of Foxit Reader v9.7.2.
