Maybe the title should be "VMWare Fusion (for Mac OSX) local privilege escalation." Since, unlike Linux, the ways to exploit it on OS X seem significantly more limited.
I think it works with any setuid binary (which VMWare Fusion is) that also calls bash internally.