The reality is that malicious code can get embedded in virtually any digital format (including images and videos). Virus protection tools and (mostly) the media viewers built into modern browsers protect against it through pattern matching and sandboxing. But it's better to be safe than sorry.