How will Microsoft fare for product security in March, 2007?

Available to trade:

POSSIBLE ANSWERS	CHANCE	TODAY
Remote code execution in IE7 more info	43.1%/ 0.0%	(closed)
Remote code execution in Vista more info	43.5%/ 0.0%	(closed)
Remote code execution in MS Office more info	41.1%/ 0.0%	(closed)
Remote code execution in Outlook more info	40.1%/ 0.0%	(closed)
Remote code execution in WMP 10 more info	15.2%/ 0.0%	(closed)

Question closing

April 01, 2007 @ 12:00am PDT

	Background information
	Real-time results widget
	Send to a friend

Post to Twitter

TAGS

microsoft security

discussion

You must be logged in to submit a comment.

dysk • Mon Mar 05 2007 at 11:54am PST

Outlook is part of the Office product line. If a vulnerability is discovered in Outlook, will it trigger this market to close as well?

—Erek

jnazario • Wed Mar 07 2007 at 07:05am PST

You’re right, and I should have structured this better (and made it Office except for Outlook). Because of my mistake, an Outlook exploit in March 2007 will count as both Outlook at Office.

price chart

- Click on letters like this Feedletter

for news
- Click on possible answers in the right column to hide/show them on the graph

You need to upgrade your Flash Player to view the Inkling graphs.

Question News Feed

Background information

This market looks at several scenarios for Microsoft product security in March, 2007, looking at IE7, Vista, Office, and other products and remote code execution vulnerabilities. Decisions will be based on CVE vectors and Microsoft product bulletins.

More information about the possible answers

Remote code execution in IE7

At least one remote code execution vulnerability will be disclosed in March, 2007 for the Microsoft product Internet Explorer 7. This vulnerability MAY involve user interaction but MUST allow for arbitrary code execution of the attacker’s choice.

Remote code execution in Vista

At least one remote code execution vulnerability will be disclosed in March, 2007 for the Microsoft product Windows Vista (excluding additional products such as MS Office). This vulnerability MAY NOT involve user interaction and MUST allow for arbitrary code execution of the attacker’s choice.

Remote code execution in MS Office

At least one remote code execution vulnerability will be disclosed in March, 2007 for the Microsoft product Office. This vulnerability MAY involve user interaction but MUST allow for arbitrary code execution of the attacker’s choice.

Remote code execution in Outlook

At least one remote code execution vulnerability will be disclosed in March, 2007 for the Microsoft products Outlook or Outlook Express. This vulnerability MAY involve user interaction but MUST allow for arbitrary code execution of the attacker’s choice.

Remote code execution in WMP 10

At least one remote code execution vulnerability will be disclosed in March, 2007 for the Microsoft product Windows Media Player 10. This vulnerability MAY involve user interaction but MUST allow for arbitrary code execution of the attacker’s choice.