[ay]

But given a sufficiently complex code, you can execute from unexpected places. Sometimes even without any bugs involved:

http://blog.didierstevens.com/2010/03/29/escape-from-pdf/