The host is installed with Foxit Reader before 10.0.1 or Foxit PhantomPDF before 9.7.3 or 10.0.x before 10.0.1 and is prone to an information disclosure vulnerability. A flaw is present in the applications, which fails to properly handle a direct transformation from PDF Object to Stream without concern for a crafted XObject. Successful exploitation allow attackers to obtain sensitive information about an uninitialized object.