The Guest Who Could: Exploiting LPE in VMware Tools