The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate print provider.
No PoCs from references.
- https://github.com/clearbluejar/cve-markdown-charts