Ramchandra Apte added the comment: In Lib/tkinter/__init__.py:1801 , the readprofile function executes untrusted code. ---------- _______________________________________ Python tracker <report at bugs.python.org> <http://bugs.python.org/issue16248> _______________________________________