CVE:CVE-2013-3582
CNNVD:CNNVD-201308-267
Dell Latitude和Precision都是美国戴尔（Dell）公司发布的一系列笔记本电脑产品。BIOS（Basic Input-Output System，基本输出输入系统）是一组固化到计算机主板上的ROM芯片上的程序，它保存着计算机最重要的基本输入输出的程序、系统设置信息、开机后自检程序和系统自启动程序。
Dell Latitude D###，E####，XT2，Z600设备以及Dell Precision M####设备上的Dell BIOS中rbu_packet.pktNum值和rbu_packet.pktSize值中存在缓冲区溢出漏洞。本地攻击者可通过管理员权限并提供特制的值，利用该漏洞绕过BIOS签名要求并安装任意BIOS镜像。
solution:Upgrade dell latitude_d530 to a higher version than -; Upgrade dell latitude_d531 to a higher version than -; Upgrade dell latitude_d630 to a higher version than -; Upgrade dell latitude_d631 to a higher version than -; Upgrade dell latitude_d830 to a higher version than -; Upgrade dell latitude_e4200 to a higher version than -; Upgrade dell latitude_e4300 to a higher version than -; Upgrade dell latitude_e5400 to a higher version than -; Upgrade dell latitude_e5500 to a higher version than -; Upgrade dell latitude_e6400 to a higher version than -; Upgrade dell latitude_e6400_atg to a higher version than -; Upgrade dell latitude_e6400_atg_xfr to a higher version than -; Upgrade dell latitude_e6500 to a higher version than -; Upgrade dell latitude_xt2 to a higher version than -; Upgrade dell latitude_z600 to a higher version than -; Upgrade dell precision_m2300 to a higher version than -; Upgrade dell precision_m2400 to a higher version than -; Upgrade dell precision_m4300 to a higher version than -; Upgrade dell precision_m4400 to a higher version than -; Upgrade dell precision_m6300 to a higher version than -; Upgrade dell precision_m6400 to a higher version than -; Upgrade dell precision_m6500 to a higher version than -