PDF reader software is required to read PDF documents . If a malicious web page contains an infected PDF file that takes advantage of a vulnerability in the PDF reader , the system may be compromised even if the browser is secure . Some of these vulnerabilities are a result of the PDF standard allowing PDF documents to be scripted with JavaScript .