Local privilege escalation via writable service configuration

Privilege escalation in VMware Horizon Client, VMRC, and Workstation for Windows allows local users to execute commands as any user. The USB arbitration service configuration directory grants write access to every local user, allowing alteration of configuration consumed with another user's privileges. A non-administrative local account on a system with an affected product is required, and successful exploitation runs commands under any user account.