kaled - 1:36 pm on Feb 6, 2010 (gmt 0)
Are there any details anywhere about what this bug permitted?
Presumably, it somehow allowed limited-access users to make unauthorised changes - this suggests that DOS shells run at a higher privilege than the user or some serious code hacks are required to make it work. And if those code hacks worked for DOS emulation, might they still work elsewhere?
I'm afraid this is one of those myths that every computer-magazine guru on the planet repeated. 16bit DOS merely bootstrapped 32bit Windows. DOS programs ran in emulation on Win 9x (unless running in DOS mode). Although Win9x supported use of some 16bit drivers (mainly to allow old hardware such as printers to be used) other drivers were 32bit meaning that IO calls, etc were not passed to an underlying 16bit DOS layer.
On Win9x OS, Windows ran on top of DOS.