CVE-2018-1000041

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2018-1000041
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-1000041.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2018-1000041
Downstream
Related
Published
2018-02-09T23:29:01Z
Modified
2025-09-19T09:15:34.072360Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable via The victim must process a specially crafted SVG file containing an UNC path on Windows.

References

Affected packages

Git / github.com/gnome/librsvg

Affected ranges

Type
GIT
Repo
https://github.com/gnome/librsvg
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
c6ddf2ed4d768fd88adbea2b63f575cd523022ea
Type
GIT
Repo
https://github.com/imagemagick/rsvg
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
f9d69eadd2b16b00d1a1f9f286122123f8e547dd
Type
GIT
Repo
https://gitlab.gnome.org/GNOME/librsvg
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
f822e90c7a91f12c76793ffe8e349584d4d813f8

Affected versions

2.*

2.34.0
2.34.1
2.35.0
2.35.1
2.35.2
2.36.0
2.36.1
2.36.2
2.36.3
2.36.4
2.37.0
2.39.0
2.40.0
2.40.1
2.40.10
2.40.11
2.40.12
2.40.13
2.40.14
2.40.15
2.40.16
2.40.2
2.40.3
2.40.4
2.40.5
2.40.6
2.40.7
2.40.8
2.40.9
2.41.0
2.41.1

Other

GNOME_2_4_BRANCHPOINT
LIBRSVG_0_0_1
LIBRSVG_1_0_0
LIBRSVG_1_0_1
LIBRSVG_1_0_ANCHOR
LIBRSVG_1_1_1
LIBRSVG_1_1_2
LIBRSVG_1_1_3
LIBRSVG_1_1_4
LIBRSVG_1_1_5
LIBRSVG_1_1_6
LIBRSVG_2_0_1
LIBRSVG_2_1_0
LIBRSVG_2_1_1
LIBRSVG_2_1_2
LIBRSVG_2_1_3
LIBRSVG_2_1_4
LIBRSVG_2_1_5
LIBRSVG_2_22_3
LIBRSVG_2_26_2
LIBRSVG_2_26_3
LIBRSVG_2_2_0
LIBRSVG_2_31_0
help
librsvg-2-13-3
librsvg-2-13-90
librsvg-2-13-93
release-2-2-4
release-2-2-5
release-2-3-0
release-2-4-0

Database specific 

{
    "vanir_signatures": [
        {
            "deprecated": false,
            "signature_type": "Function",
            "source": "https://github.com/imagemagick/rsvg/commit/f9d69eadd2b16b00d1a1f9f286122123f8e547dd",
            "target": {
                "file": "rsvg-io.c",
                "function": "_rsvg_io_get_file_path"
            },
            "signature_version": "v1",
            "digest": {
                "function_hash": "286195117430778398300004990827169289423",
                "length": 459.0
            },
            "id": "CVE-2018-1000041-1102b600"
        },
        {
            "deprecated": false,
            "signature_type": "Line",
            "source": "https://github.com/imagemagick/rsvg/commit/f9d69eadd2b16b00d1a1f9f286122123f8e547dd",
            "target": {
                "file": "rsvg-io.c"
            },
            "signature_version": "v1",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "86022843286549888837123888105820422322",
                    "259425425816889724692286720210443290915",
                    "334295550670766026233948921873805680696",
                    "46920378987764707177351963029730365800"
                ]
            },
            "id": "CVE-2018-1000041-b44f622c"
        }
    ]
}