[tedunangst]

One could also imagine a specially crafted image file which exploits some vulnerability of the graphics library to gain arbitrary code execution. Then you just need the user to look at the twitter button.

[MichaelAza]

True, though I'd think it would be easier to exploit a torrent client than a browser.