In order to support BIOS service routines in legacy 16bit applications,
the Windows NT Kernel supports the concept of BIOS calls in the
Virtual-8086 mode monitor code."
"Upon successful exploitation, the kernel stack is switched to an attacker
specified address." This would allow arbitrary code execution with