Browser escapes are cheap enough and common enough that we've seen malware delivered through advertising networks before.