CVE-2017-14693: IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other imp...

Security readout for executives and security teams

This issue affects IrfanView 4.44 32-bit when handling a crafted .djvu file. The documented outcome is denial of service, with possible unspecified other impact. Business risk depends on whether users open DjVu files from untrusted sources. The sources do not provide a CVSS score or confirmed fixed version. Exposure is most plausible on endpoints running IrfanView 4.44 32-bit, especially where users can open untrusted .djvu files. The source bundle does not identify other versions, platforms, or deployment patterns. Handle as a targeted workstation hygiene item unless DjVu files are common in business workflows. Prioritize exposed user groups that receive external files. The lack of severity scoring and exploit evidence limits urgency, but unsupported or old image viewers should be reduced. Mitigation focus: Inventory IrfanView installations and identify any 32-bit 4.44 deployments.; Review IrfanView vendor history for fixed versions or plugin updates.; Limit opening of untrusted .djvu files on exposed workstations..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.