CVE-2013-3582 Information

Description

Buffer overflow in Dell BIOS on Dell Latitude D E XT2 and Z600 devices and Dell Precision M devices allows local users to bypass intended BIOS signing requirements and install arbitrary BIOS images by leveraging administrative privileges and providing a crafted rbu_packet.pktNum value in conjunction with a crafted rbu_packet.pktSize value.

Reference

http://www.kb.cert.org/vuls/id/912156 http://www.kb.cert.org/vuls/id/BLUU-99HSLA https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-Slides.pdf https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-WP.pdf https://www.blackhat.com/us-13/archives.htmlButterworth