I am pretty sure that every Mac junkie read about the possibility to hide malicious scripts in MP3 files and therefore creating an OS X trojan horse.
Here’s some stuff that clarifies the article. Not that I understand all of it.
Found via Tim’s blog.