python-virtualenv could be made to crash or run programs as your login if it opened a specially crafted file.

Source: Ubuntu 7271-1: virtualenv Security Advisory Updates