CVE-2017-9884: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possib...

Security readout for executives and security teams

This issue affects IrfanView 4.44 32-bit when using FPX Plugin 4.46. A malicious FlashPix .fpx image can crash the application, and the CVE leaves open the possibility of other unspecified impact. The sources do not provide a CVSS score, confirmed patch, or evidence of active exploitation. Exposure appears limited to systems with IrfanView 4.44 32-bit and FPX Plugin 4.46 that open untrusted .fpx files. The bundle does not identify affected CPEs, enterprise deployment prevalence, or whether later plugin versions are vulnerable. Treat as targeted legacy-software risk, not a confirmed emergency. Prioritize if the organization still uses IrfanView with FPX support on workstations that receive external files. Mitigation focus: Check vendor plugin guidance for fixed or current FPX plugin versions.; Remove or disable FPX Plugin 4.46 if FlashPix support is unnecessary.; Avoid opening untrusted .fpx files from email, web downloads, or shared drives..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.