Zulu, a virus writer from South America, appears to have discovered that Adobe PDF files can be used to carry computer viruses

....

However with Zulu's trick, a malicious
VBScript file can instead be hidden inside a PDF file which Outlook
considers safe.

LINK

http://lwn.net/2001/0809/a/adobe-pdf-vul.php3 

 vTiger CRM allows an user to bypass authentication when requesting SOAP services.
          In addition, arbitrary file upload is possible through the AddEmailAttachment SOAP
          service. By combining both vulnerabilities an attacker can upload and execute PHP
          code. This module has been tested successfully on vTiger CRM v5.4.0 over Ubuntu
          10.04 and Windows 2003 SP2.

LINK

https://www.rapid7.com/db/modules/exploit/multi/http/vtiger_soap_upload 

THEREFORE

Import image in Acrobat using JavaScript (preferred on document-level)

 

(are you sure you want to create a document measuring 1x1 pt?)
The next issue with the first variant is a bug in Acrobat, which discards "floating" Icon Objects when saving the document; you'd have to attach the Icon Object to a field to keep it; this field can be hidden, or even on a hidden Template page in the document.

LINK
http://stackoverflow.com/questions/25323427/import-image-in-acrobat-using-javascript-preferred-on-document-level