遠端 Windows 主機上安裝的 ImageMagick 版本是比 6.9.4-5 舊的 6.x 版，或比 7.0.1-7 舊的 7.x 版。因此受到多個拒絕服務弱點影響，這是因為 coders/dcm.c 的 ReadDCMImage() 函式中多個 NULL 指標解除參照瑕疵所導致，而這些瑕疵會在處理光度測定解譯或處理框架時觸發。未經驗證的遠端攻擊者可惡意利用這些瑕疵，造成與程式庫連結的處理程序損毀，進而導致拒絕服務情形。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 6.9.4-5 之前的 ImageMagick 中，coders/viff.c 的 ReadVIFFImage 函式存在緩衝區溢位，會允許遠端攻擊者透過特製的檔案造成拒絕服務 (應用程式損毀)。 (CVE-2016-10066)

請注意，Nessus 依賴供應商報告的套件存在。

远程 Windows 主机上安装的 ImageMagick 版本是低于 6.9.4-5 的 6.x 或低于 7.0.1-7 的 7.x。因此，它受到多种拒绝服务漏洞的影响，这是因为 coders/dcm.c 的 ReadDCMImage() 函数中存在多个空指针取消引用缺陷所导致，而这些缺陷会在处理光度解释或处理帧时触发。未经认证的远程攻击者可利用这些缺陷，造成与库链接的进程崩溃，从而导致拒绝服务情况。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 6.9.4-5 之前的 ImageMagick 中，coders/viff.c 的 ReadVIFFImage 函数中存在缓冲区溢出，可让远程攻击者通过特制的文件造成拒绝服务（应用程序崩溃）。 (CVE-2016-10066)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

リモートのWindowsホストにインストールされているImageMagickのバージョンは、6.9.4-5より前の6.xか7.0.1-7より前の7.xです。このため、複数のサービス拒否脆弱性の影響を受けます。

  - A denial of service vulnerability exists in the DCM reader due to a NULL pointer dereference flaw that is triggered during the handling of photometric interpretation or the handling of frames. An unauthenticated, remote attacker can exploit this to crash processes linked against the library.
    (CVE-2016-5689)

  - A denial of service vulnerability exists in the DCM reader due to improper computation of the pixel scaling table. An unauthenticated, remote attacker can exploit this to crash processes linked against the library.
    (CVE-2016-5690)

  - A denial of service vulnerability exists in the DCM reader due to improper validation of pixel.red, pixel,green, and pixel.blue. An unauthenticated, remote attacker can exploit this to crash processes linked against the library. (CVE-2016-5691)

  - Multiple denial of service vulnerabilities exist in multiple functions in viff.c due to improper handling of a saturation of exceptions. An unauthenticated, remote attacker can exploit these issues to crash processes linked against the library. (CVE-2016-10066, CVE-2016-10067)

  - A denial of service vulnerability exists in the ThrowReaderException() function in mat.c due to improper handling of frame numbers in a crafted MAT file. An unauthenticated, remote attacker can exploit this to crash processes linked against the library.
    (CVE-2016-10069)

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 6.9.4-5 以前の ImageMagick の coders/viff.c の ReadVIFFImage 関数のバッファオーバーフローにより、リモートの攻撃者が細工されたファイルを介してサービス拒否（アプリケーションクラッシュ）を引き起こす可能性があります。 （CVE-2016-10066）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The version of ImageMagick installed on the remote Windows host is 6.x prior to 6.9.4-5 or 7.x prior to 7.0.1-7. It is, therefore, affected by multiple denial of service vulnerabilities :

  - A denial of service vulnerability exists in the DCM     reader due to a NULL pointer dereference flaw that is     triggered during the handling of photometric     interpretation or the handling of frames. An     unauthenticated, remote attacker can exploit this to     crash processes linked against the library.
    (CVE-2016-5689)

  - A denial of service vulnerability exists in the DCM     reader due to improper computation of the pixel scaling     table. An unauthenticated, remote attacker can exploit     this to crash processes linked against the library.
    (CVE-2016-5690)

  - A denial of service vulnerability exists in the DCM     reader due to improper validation of pixel.red,     pixel,green, and pixel.blue. An unauthenticated, remote     attacker can exploit this to crash processes linked     against the library. (CVE-2016-5691)

  - Multiple denial of service vulnerabilities exist in     multiple functions in viff.c due to improper handling of     a saturation of exceptions. An unauthenticated, remote     attacker can exploit these issues to crash processes     linked against the library. (CVE-2016-10066,     CVE-2016-10067)

  - A denial of service vulnerability exists in the     ThrowReaderException() function in mat.c due to improper     handling of frame numbers in a crafted MAT file. An     unauthenticated, remote attacker can exploit this to     crash processes linked against the library.
    (CVE-2016-10069)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Buffer overflow in the ReadVIFFImage function in coders/viff.c in ImageMagick before 6.9.4-5 allows remote     attackers to cause a denial of service (application crash) via a crafted file. (CVE-2016-10066)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
91819	ImageMagick 6.x < 6.9.4-5 / 7.x < 7.0.1-7 多個 DoS	Nessus	Windows	6/24/2016	3/30/2026	critical
219143	Linux Distros 未修補弱點：CVE-2016-10066	Nessus	Misc.	3/4/2025	7/24/2026	medium
91819	ImageMagick 6.x < 6.9.4-5 / 7.x < 7.0.1-7 多种 DoS	Nessus	Windows	6/24/2016	3/30/2026	critical
219143	Linux Distros 未修补的漏洞: CVE-2016-10066	Nessus	Misc.	3/4/2025	7/24/2026	medium
91819	ImageMagick 6.x < 6.9.4-5/7.x < 7.0.1-7の複数のDoS	Nessus	Windows	6/24/2016	3/30/2026	critical
219143	Linux Distros のパッチ未適用の脆弱性: CVE-2016-10066	Nessus	Misc.	3/4/2025	7/24/2026	medium
91819	ImageMagick 6.x < 6.9.4-5 / 7.x < 7.0.1-7 Multiple DoS	Nessus	Windows	6/24/2016	3/30/2026	critical
219143	Linux Distros Unpatched Vulnerability : CVE-2016-10066	Nessus	Misc.	3/4/2025	7/24/2026	medium
135519	EulerOS 2.0 SP3 : ImageMagick (EulerOS-SA-2020-1390)	Nessus	Huawei Local Security Checks	4/15/2020	2/9/2021	critical
131846	EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2019-2354)	Nessus	Huawei Local Security Checks	12/10/2019	2/9/2021	critical

Detections

Analytics

Plugins Search

critical

medium

critical

medium

critical

medium

critical

medium

critical

critical