Description
Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell Precision M#### devices, allows local users to bypass intended BIOS signing requirements and install arbitrary BIOS images by leveraging administrative privileges and providing a crafted rbu_packet.pktNum value in conjunction with a crafted rbu_packet.pktSize value.
Metrics
CVSS 2.0 7.6/10
AV:N/AC:H/Au:N/C:C/I:C/A:CWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://www.kb.cert.org/vuls/id/912156US Government Resource
- http://www.kb.cert.org/vuls/id/BLUU-99HSLAUS Government Resource
- https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-Slides.pdfExploit
- https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-WP.pdfExploit
- https://www.blackhat.com/us-13/archives.html#Butterworth
- http://www.kb.cert.org/vuls/id/912156US Government Resource
- http://www.kb.cert.org/vuls/id/BLUU-99HSLAUS Government Resource
- https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-Slides.pdfExploit
- https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-WP.pdfExploit
- https://www.blackhat.com/us-13/archives.html#Butterworth
Timeline
- Published
- Aug 28, 2013
- Last modified
- Jun 16, 2026
- NVD status
- Modified