CVE-2016-7449

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.24

Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap read, by providing a file with an "unterminated" string. This is related to the TIFFGetField function in coders/tiff.c.

Recommendations For GraphicsMagick version 1.3.24, consider avoiding the use of the TIFFGetField function until a patch is available. As a temporary workaround, restrict the processing of TIFF files containing potentially "unterminated" strings to minimize the risk of exploitation.