CVE-2018-1000041

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-1000041
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000041.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-1000041
Downstream
Related
Published
2018-02-09T23:29:01.260Z
Modified
2026-07-08T14:13:20.969704Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable via The victim must process a specially crafted SVG file containing an UNC path on Windows.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "7.0"
                },
                {
                    "last_affected": "7.0"
                }
            ],
            "vendor_product": "debian:debian_linux",
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING"
        }
    ]
}
References

Affected packages

Git
github.com/gnome/librsvg

Affected ranges

Type
GIT
Repo
https://github.com/gnome/librsvg
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
f822e90c7a91f12c76793ffe8e349584d4d813f8
Fixed
c6ddf2ed4d768fd88adbea2b63f575cd523022ea
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:gnome:librsvg:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.41.2"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

2.*
2.34.0
2.34.1
2.35.0
2.35.1
2.35.2
2.36.0
2.36.1
2.36.2
2.36.3
2.36.4
2.37.0
2.39.0
2.40.0
2.40.1
2.40.10
2.40.11
2.40.12
2.40.13
2.40.14
2.40.15
2.40.16
2.40.2
2.40.3
2.40.4
2.40.5
2.40.6
2.40.7
2.40.8
2.40.9
2.41.0
2.41.1
Other
GNOME_2_4_BRANCHPOINT
LIBRSVG_0_0_1
LIBRSVG_1_0_0
LIBRSVG_1_0_1
LIBRSVG_1_0_ANCHOR
LIBRSVG_1_1_1
LIBRSVG_1_1_2
LIBRSVG_1_1_3
LIBRSVG_1_1_4
LIBRSVG_1_1_5
LIBRSVG_1_1_6
LIBRSVG_2_0_1
LIBRSVG_2_1_0
LIBRSVG_2_1_1
LIBRSVG_2_1_2
LIBRSVG_2_1_3
LIBRSVG_2_1_4
LIBRSVG_2_1_5
LIBRSVG_2_22_3
LIBRSVG_2_26_2
LIBRSVG_2_26_3
LIBRSVG_2_2_0
LIBRSVG_2_31_0
help
librsvg-2-13-3
librsvg-2-13-90
librsvg-2-13-93
release-2-2-4
release-2-2-5
release-2-3-0
release-2-4-0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000041.json"
github.com/imagemagick/rsvg

Affected ranges

Type
GIT
Repo
https://github.com/imagemagick/rsvg
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
f9d69eadd2b16b00d1a1f9f286122123f8e547dd
Database specific
Show details 
{
    "source": "REFERENCES"
}

Database specific

vanir_signatures_modified 
"2026-07-08T14:13:20Z"
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000041.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "target": {
            "function": "_rsvg_io_get_file_path",
            "file": "rsvg-io.c"
        },
        "signature_type": "Function",
        "source": "https://github.com/imagemagick/rsvg/commit/f9d69eadd2b16b00d1a1f9f286122123f8e547dd",
        "digest": {
            "length": 459.0,
            "function_hash": "286195117430778398300004990827169289423"
        },
        "signature_version": "v1",
        "id": "CVE-2018-1000041-1102b600"
    },
    {
        "deprecated": false,
        "target": {
            "file": "rsvg-io.c"
        },
        "signature_type": "Line",
        "source": "https://github.com/imagemagick/rsvg/commit/f9d69eadd2b16b00d1a1f9f286122123f8e547dd",
        "digest": {
            "line_hashes": [
                "86022843286549888837123888105820422322",
                "259425425816889724692286720210443290915",
                "334295550670766026233948921873805680696",
                "46920378987764707177351963029730365800"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "id": "CVE-2018-1000041-b44f622c"
    }
]
gitlab.gnome.org/gnome/librsvg

Affected ranges

Type
GIT
Repo
https://gitlab.gnome.org/gnome/librsvg
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
f822e90c7a91f12c76793ffe8e349584d4d813f8
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:gnome:librsvg:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.41.2"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

2.*
2.34.0
2.34.1
2.35.0
2.35.1
2.35.2
2.36.0
2.36.1
2.36.2
2.36.3
2.36.4
2.37.0
2.39.0
2.40.0
2.40.1
2.40.10
2.40.11
2.40.12
2.40.13
2.40.14
2.40.15
2.40.16
2.40.2
2.40.3
2.40.4
2.40.5
2.40.6
2.40.7
2.40.8
2.40.9
2.41.0
2.41.1
Other
GNOME_2_4_BRANCHPOINT
LIBRSVG_0_0_1
LIBRSVG_1_0_0
LIBRSVG_1_0_1
LIBRSVG_1_0_ANCHOR
LIBRSVG_1_1_1
LIBRSVG_1_1_2
LIBRSVG_1_1_3
LIBRSVG_1_1_4
LIBRSVG_1_1_5
LIBRSVG_1_1_6
LIBRSVG_2_0_1
LIBRSVG_2_1_0
LIBRSVG_2_1_1
LIBRSVG_2_1_2
LIBRSVG_2_1_3
LIBRSVG_2_1_4
LIBRSVG_2_1_5
LIBRSVG_2_22_3
LIBRSVG_2_26_2
LIBRSVG_2_26_3
LIBRSVG_2_2_0
LIBRSVG_2_31_0
help
librsvg-2-13-3
librsvg-2-13-90
librsvg-2-13-93
release-2-2-4
release-2-2-5
release-2-3-0
release-2-4-0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000041.json"