This article is from the CD-Recordable FAQ, by Andy McFadden (email@example.com) with numerous contributions by others.
Absolutely. Infected CD-ROMs are every bit as nasty as infected floppies,
if not worse: you can't disinfect the source media. It is prudent to
scan your files before creating a CD-ROM for distribution, and it's not
a bad idea to scan the CD-ROM afterward (in case somebody has cleverly
infected your CD writing software).
The dangers of boot sector viruses on bootable CD-ROMs are probably low.
Because the boot sector is created directly by the recording software, and
can't be modified after it has been written, the opportunity for infection