Malicious ISO

Is it possible for an iso file used to boot a VirtualBox virtual machine to install malware on the host computer?

 

If so, are there any examples reported in the wild?

 

Would Norton NIS 21.5 know about and protect against such ISOs?

 

Thanks