CVE-2013-3582
7.6
Vector
AV:N/AC:H/Au:N/C:C/I:C/A:C
Exploitability: 4.9 / Impact: 10.0
Source: NVD
Description
Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell Precision M#### devices, allows local users to bypass intended BIOS signing requirements and install arbitrary BIOS images by leveraging administrative privileges and providing a crafted rbu_packet.pktNum value in conjunction with a crafted rbu_packet.pktSize value.
Affected (22)
Products: Dell: Latitude D530, Latitude D531, Latitude D630, Latitude D631, Latitude D830, Latitude E4200, Latitude E4300, Latitude E5400, Latitude E5500, Latitude E6400, Latitude E6400 Atg, Latitude E6400 Atg Xfr, Latitude E6500, Latitude Xt2, Latitude Z600, Precision M2300, Precision M2400, Precision M4300, Precision M4400, Precision M6300, Precision M6400, Precision M6500
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions |
References (10)
Source: cret@cert.org
Exploit
Source: cret@cert.org
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.