CVE-2006-5585: Microsoft Windows 2003 Server

High severity, CVSS 7.2. EPSS: 1.8% chance of exploitation in the next 30 days.

The Client-Server Run-time Subsystem in Microsoft Windows XP SP2 and Server 2003 allows local users to gain privileges via a crafted file manifest within an application, aka "File Manifest Corruption Vulnerability."

Affected products

• Microsoft Windows 2003 Server: version itanium only; version r2 only
• Microsoft Windows XP: any version

Published 2006-12-13. Last modified 2026-06-16.