遠端 Windows 主機上安裝的 ImageMagick 版本是比 6.9.4-5 舊的 6.x 版，或比 7.0.1-7 舊的 7.x 版。因此受到多個拒絕服務弱點影響，這是因為 coders/dcm.c 的 ReadDCMImage() 函式中多個 NULL 指標解除參照瑕疵所導致，而這些瑕疵會在處理光度測定解譯或處理框架時觸發。未經驗證的遠端攻擊者可惡意利用這些瑕疵，造成與程式庫連結的處理程序損毀，進而導致拒絕服務情形。

远程 Windows 主机上安装的 ImageMagick 版本是低于 6.9.4-5 的 6.x 或低于 7.0.1-7 的 7.x。因此，它受到多种拒绝服务漏洞的影响，这是因为 coders/dcm.c 的 ReadDCMImage() 函数中存在多个空指针取消引用缺陷所导致，而这些缺陷会在处理光度解释或处理帧时触发。未经认证的远程攻击者可利用这些缺陷，造成与库链接的进程崩溃，从而导致拒绝服务情况。

リモートのWindowsホストにインストールされているImageMagickのバージョンは、6.9.4-5より前の6.xか7.0.1-7より前の7.xです。このため、複数のサービス拒否脆弱性の影響を受けます。

  - A denial of service vulnerability exists in the DCM reader due to a NULL pointer dereference flaw that is triggered during the handling of photometric interpretation or the handling of frames. An unauthenticated, remote attacker can exploit this to crash processes linked against the library.
    (CVE-2016-5689)

  - A denial of service vulnerability exists in the DCM reader due to improper computation of the pixel scaling table. An unauthenticated, remote attacker can exploit this to crash processes linked against the library.
    (CVE-2016-5690)

  - A denial of service vulnerability exists in the DCM reader due to improper validation of pixel.red, pixel,green, and pixel.blue. An unauthenticated, remote attacker can exploit this to crash processes linked against the library. (CVE-2016-5691)

  - Multiple denial of service vulnerabilities exist in multiple functions in viff.c due to improper handling of a saturation of exceptions. An unauthenticated, remote attacker can exploit these issues to crash processes linked against the library. (CVE-2016-10066, CVE-2016-10067)

  - A denial of service vulnerability exists in the ThrowReaderException() function in mat.c due to improper handling of frame numbers in a crafted MAT file. An unauthenticated, remote attacker can exploit this to crash processes linked against the library.
    (CVE-2016-10069)

The version of ImageMagick installed on the remote Windows host is 6.x prior to 6.9.4-5 or 7.x prior to 7.0.1-7. It is, therefore, affected by multiple denial of service vulnerabilities :

  - A denial of service vulnerability exists in the DCM     reader due to a NULL pointer dereference flaw that is     triggered during the handling of photometric     interpretation or the handling of frames. An     unauthenticated, remote attacker can exploit this to     crash processes linked against the library.
    (CVE-2016-5689)

  - A denial of service vulnerability exists in the DCM     reader due to improper computation of the pixel scaling     table. An unauthenticated, remote attacker can exploit     this to crash processes linked against the library.
    (CVE-2016-5690)

  - A denial of service vulnerability exists in the DCM     reader due to improper validation of pixel.red,     pixel,green, and pixel.blue. An unauthenticated, remote     attacker can exploit this to crash processes linked     against the library. (CVE-2016-5691)

  - Multiple denial of service vulnerabilities exist in     multiple functions in viff.c due to improper handling of     a saturation of exceptions. An unauthenticated, remote     attacker can exploit these issues to crash processes     linked against the library. (CVE-2016-10066,     CVE-2016-10067)

  - A denial of service vulnerability exists in the     ThrowReaderException() function in mat.c due to improper     handling of frame numbers in a crafted MAT file. An     unauthenticated, remote attacker can exploit this to     crash processes linked against the library.
    (CVE-2016-10069)

ID	名稱	產品	系列	已發布	已更新	嚴重性
91819	ImageMagick 6.x < 6.9.4-5 / 7.x < 7.0.1-7 多個 DoS	Nessus	Windows	2016/6/24	2026/3/30	critical
91819	ImageMagick 6.x < 6.9.4-5 / 7.x < 7.0.1-7 多种 DoS	Nessus	Windows	2016/6/24	2026/3/30	critical
91819	ImageMagick 6.x < 6.9.4-5/7.x < 7.0.1-7の複数のDoS	Nessus	Windows	2016/6/24	2026/3/30	critical
91819	ImageMagick 6.x < 6.9.4-5 / 7.x < 7.0.1-7 Multiple DoS	Nessus	Windows	2016/6/24	2026/3/30	critical
135519	EulerOS 2.0 SP3 : ImageMagick (EulerOS-SA-2020-1390)	Nessus	Huawei Local Security Checks	2020/4/15	2021/2/9	critical
131846	EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2019-2354)	Nessus	Huawei Local Security Checks	2019/12/10	2021/2/9	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical