VULNERABILITY INTELLIGENCE

CVE-2013-3667

CVSS score6.4 MEDIUM
EPSS probability1.81%
CISA KEVNot currently listed
Published2013-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:P

Description

The software update mechanism as used in Bare Bones Software Yojimbo before 4.0, TextWrangler before 4.5.3, and BBEdit before 10.5.5 does not properly download and verify updates before installation, which allows attackers to perform "tampering or corruption" of the updates.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references