CVE-2017-9889: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possib...

Security readout for executives and security teams

This issue affects IrfanView 4.44 32-bit when the FPX Plugin 4.46 processes a malicious FPX image file. The known outcome is application denial of service, with the CVE also noting possible unspecified impact. Business risk is concentrated on endpoints where users can receive and open unfamiliar .fpx files. Exposure is likely limited to Windows workstations using IrfanView 4.44 32-bit with FPX Plugin 4.46 installed, especially where .fpx files are opened from email, downloads, removable media, or shared folders. Prioritize as a scoped desktop application risk, not an internet-facing emergency based on current evidence. Address systems that handle untrusted image files first, and require vendor guidance or plugin removal where FPX support is unnecessary. Mitigation focus: Inventory IrfanView installations and identify FPX Plugin 4.46 usage.; Check IrfanView plugin guidance for any fixed or replacement FPX plugin.; Remove or disable FPX support if the format is not business-required..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.