CVE-2017-9892: IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possib...

Security readout for executives and security teams

This CVE describes a crash or possible unspecified impact in IrfanView 4.44 32-bit when the FPX Plugin 4.46 processes a crafted .fpx image file. Business risk is mainly tied to legacy desktops or image workflows that still open FPX files from untrusted sources. Exposure is most likely on Windows endpoints using IrfanView 4.44 32-bit with FPX Plugin 4.46, especially where users open external image files. Organizations without IrfanView, without this plugin, or without FPX handling appear less exposed based on the provided sources. Treat this as a focused legacy endpoint hygiene issue, not an internet-facing emergency based on current evidence. Prioritize environments with unmanaged desktops, external file intake, or old imaging workflows, and close exposure by updating or removing the affected plugin. Mitigation focus: Inventory IrfanView installations and identify 32-bit version 4.44 with FPX Plugin 4.46.; Check IrfanView vendor plugin guidance for supported or updated FPX plugin versions.; Remove or disable the FPX plugin where FPX viewing is unnecessary..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.