Hi,

the currently shipped python27.dll under C:\Program Files(x86)\MusicBrainz Picard\python27.dll in Picard version 1.2 has the version number 2.7.3150.1013

This version has two known vulnerabilities:
CVE-2013-1752: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1752
CVE-2013-4238: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4238

According to this Advisory:

https://secunia.com/advisories/56234

this results in possible spoofing or DoS attacks.

this can easily be fixed by updating to Python version 2.7.6.

I searched the issue list but did not find anything regarding this
security issue.
I also do not know which component exactly uses the dll, as I'm not
familiar with the Picard code yet.