CVE-2013-3667

Published: Dec 31, 2013Modified: Apr 29, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

The software update mechanism as used in Bare Bones Software Yojimbo before 4.0, TextWrangler before 4.5.3, and BBEdit before 10.5.5 does not properly download and verify updates before installation, which allows attackers to perform "tampering or corruption" of the updates.

Affected (35)

Products: Barebones: Textwrangler, Bbedit, Yojimbo

3 products

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Barebones Textwrangler	Up to 4.5.2
Barebones Textwrangler	Version 2.3
Barebones Textwrangler	Version 3.0
Barebones Textwrangler	Version 3.1
Barebones Textwrangler	Version 3.5.1
Barebones Textwrangler	Version 3.5.3
Barebones Textwrangler	Version 3.5
Barebones Textwrangler	Version 4.0.1
Barebones Textwrangler	Version 4.0
Barebones Textwrangler	Version 4.5.1
Barebones Textwrangler	Version 4.5

Configuration B

10 vulnerable

Vulnerable Software	Affected Versions
Barebones Bbedit	Up to 10.5.4
Barebones Bbedit	Version 10.0.1
Barebones Bbedit	Version 10.0
Barebones Bbedit	Version 10.1.1
Barebones Bbedit	Version 10.1.2
Barebones Bbedit	Version 10.1
Barebones Bbedit	Version 10.5.1
Barebones Bbedit	Version 10.5.2
Barebones Bbedit	Version 10.5.3
Barebones Bbedit	Version 10.5

Configuration C

14 vulnerable

Vulnerable Software	Affected Versions
Barebones Yojimbo	Up to 3.0.4
Barebones Yojimbo	Version 1.4.1
Barebones Yojimbo	Version 1.4.2
Barebones Yojimbo	Version 1.4
Barebones Yojimbo	Version 1.5.1
Barebones Yojimbo	Version 1.5.2
Barebones Yojimbo	Version 1.5
Barebones Yojimbo	Version 2.0
Barebones Yojimbo	Version 2.1
Barebones Yojimbo	Version 2.2
Barebones Yojimbo	Version 3.0.1
Barebones Yojimbo	Version 3.0.2
Barebones Yojimbo	Version 3.0.3
Barebones Yojimbo	Version 3.0