Here is one of the most comprehensive articles I have come across. The author demos three methods to trigger the vulnerability:
- When the user just selects the infected pdf doc with a single click
- If the user changes his Windows Explorer's view to Thumbnails View
- If the victim hovers his mouse's cursor over the document