high7.6
CVE-2013-3582
Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell Precision M#### devices, allows local users to bypass intended BIOS …
Impact
Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell Precision M#### devices, allows local users to bypass intended BIOS signing requirements and install arbitrary BIOS images by leveraging administrative privileges and providing a crafted rbu_packet.pktNum value in conjunction with a crafted rbu_packet.pktSize value.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Latitude D530 | All versions |
| Dell | Latitude D531 | All versions |
| Dell | Latitude D630 | All versions |
| Dell | Latitude D631 | All versions |
| Dell | Latitude D830 | All versions |
| Dell | Latitude E4200 | All versions |
| Dell | Latitude E4300 | All versions |
| Dell | Latitude E5400 | All versions |
| Dell | Latitude E5500 | All versions |
| Dell | Latitude E6400 | All versions |
| Dell | Latitude E6400 Atg | All versions |
| Dell | Latitude E6400 Atg Xfr | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.kb.cert.org/vuls/id/912156
- http://www.kb.cert.org/vuls/id/BLUU-99HSLA
- https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-Slides.pdf
- https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-WP.pdf
- https://www.blackhat.com/us-13/archives.html#Butterworth
- http://www.kb.cert.org/vuls/id/912156
- http://www.kb.cert.org/vuls/id/BLUU-99HSLA
- https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-Slides.pdf
- https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-WP.pdf
- https://www.blackhat.com/us-13/archives.html#Butterworth