The host is installed with Foxit Reader 11.0 before 11.2.2 and is prone to an improper parsing vulnerability. A flaw is present in the applications, which fails to properly handle the parsing engine. Successful exploitation could lead to an incremental saving attack and shadow attack and deliver incorrect signature information when handling certain signed PDF files.