http://www.sfgate.com/cgi-bin/articl...4.DTL#sections

Media players in personal computers have serious vulnerabilities that could allow online criminals to attach malicious code and infect computers without the user's knowledge