Security Focus reports about a  PNG (Portable Network
Graphic) and MSN Messenger & Windows Media Player vulnerability.

I am little concerned because it appears that Windows Media Player will accept a PNG within the album art field in a standard audio file.  Not sure if the an "infected PNG" can be inserted into the album art field but I guess in theory it is possible. 

So, that is why I have some concern for podcasters specifically because some of our publication source like OpenPodcast.org or Blogdigger.com can be "seeded" from just about anyone.

I have sent some emails and heard back from some ‘industry network security heavyweights’ that there are no exploits in the wild.  But that only keeps you safe at almost the same notional level as my concern above.

UPDATE: F-Secure warns of exploit code being available.