Not really. This is pre-ASLR, so all you need to do is push a string pointer on the stack and call an address. Probably less than 15 bytes of machine code you'd need to hex-edit into an existing exe.
If you have hard drive access you can replace the logon.scr screensaver executable with the command prompt executable, then a few minutes after boot up a command prompt with system privileges will appear by magic.
