In theory, sure. In practice, we (reading code/Linux news) don't see much of that. (Edit to clarify, I'm too lazy to pirate movies, so I'm not a first party source.)
Don't run the video player with administration credentials, and keep the video player up to date and it's likely to be fine.