Dave's Blog

Microsoft releases Security Bulletin MS12-046 - Important

2012-07-10T21:46:00Z

Microsoft has released Security Bulletin MS12-046 which resolves a privately reported vulnerability in Microsoft Visual Basic for Applications (VBA).

The complete Security Bulletin can be found here

Summit has made the updated version of the Visual Basic for Applications SDK that addresses the vulnerability described in this bulletin available here for independent software vendors (ISVs).

The direct link to the VBAOF11 Debug 1054.

The direct link to the VBAOF11 Release 1054

From the Security Bulletin...

General Information

Executive Summary

This security update resolves one publicly disclosed vulnerability in Microsoft Visual Basic for Applications. The vulnerability could allow remote code execution if a user opens a legitimate Microsoft Office file (such as a .docx file) that is located in the same directory as a specially crafted dynamic link library (DLL) file. An attacker could then install programs; view, change, or delete data; or create new accounts that have full user rights. If a user is logged on with administrative user rights, an attacker could take complete control of the affected system. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

This security update is rated Important for all supported versions of Microsoft Visual Basic for Applications SDK and third-party applications that use Microsoft Visual Basic for Applications. This security update is also rated Important for all supported editions of Microsoft Office 2003 SP3, Microsoft Office 2007 SP2, and Microsoft Office 2010. For more information, see the subsection, Affected and Non-Affected Software, in this section.

The security update addresses the vulnerability by correcting how Microsoft Visual Basic for Applications loads external libraries. For more information about the vulnerability, see the Frequently Asked Questions (FAQ) subsection for the specific vulnerability entry under the next section, Vulnerability Information.

Microsoft releases Security Bulletin MS10-031 - Critical

2010-05-11T18:13:00Z

Microsoft has released Security Bulletin MS10-031 which resolves a privately reported vulnerability in Microsoft Visual Basic for Applications (VBA).

The complete Security Bulletin can be found here

Summit has made the updated version of the Visual Basic for Applications SDK that addresses the vulnerability described in this bulletin available here for independent software vendors (ISVs)

From the Security Bulletin...

Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution (978213)

This security update resolves a privately reported vulnerability in Microsoft Visual Basic for Applications. The vulnerability could allow remote code execution if a host application opens and passes a specially crafted file to the Visual Basic for Applications runtime. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

This security update is rated Critical for all supported versions of Microsoft Visual Basic for Applications SDK and third-party applications that use Microsoft Visual Basic for Applications. This security update is also rated Important for all supported editions of Microsoft Office XP, Microsoft Office 2003, and the 2007 Microsoft Office System. For more information, see the subsection, Affected and Non-Affected Software, in this section.

The update addresses the vulnerability by modifying the way that Visual Basic for Applications searches for ActiveX Controls embedded in documents. For more information about the vulnerability, see the Frequently Asked Questions (FAQ) subsection for the specific vulnerability entry under the next section, Vulnerability Information.

Recommendation. Microsoft recommends that customers apply the update immediately.

Developer Tools

Developer Tools	Maximum Security Impact	Aggregate Severity Rating	Bulletins Replaced by this Update
Microsoft Visual Basic for Applications^[1] (KB974945)	Remote Code Execution	Critical	MS06-047
Microsoft Visual Basic for Applications SDK^[2][3]	Remote Code Execution	Critical	MS06-047

^[3]The updated version of the Visual Basic for Applications SDK that addresses the vulnerability described in this bulletin is available for independent software vendors (ISVs) from the Summit Software Company. For more information, see the next section, Frequently Asked Questions (FAQ) Related to This Security Update.

Corel now shipping VSTA

2010-03-09T17:41:00Z

Summit Software is pleased to announce that Corel is now shipping VSTA in CorelDraw X5.

CorelDraw is a versatile graphic design software that provides it all - vector illustration, page layout, photo editing, tracing, Web graphics and animation - in one tightly integrated suite.

For more information and to download CorelDraw X5, visit www.corel.com/coreldraw

David Schneid named CEO of Summit Software

2009-07-31T18:43:00Z

Summit Software Company is pleased to announce that David Schneid has been promoted to Chief Executive Officer. This decision was approved by the Board of Directors of Summit Software Company. David replaces Bill Fisher, a founder of Summit, who has accepted the opportunity to become the Deputy County Executive of Onondaga County under the leadership of County Executive Joanie Mahoney. Mr. Fisher will continue to serve as the Chairman of the Board of Summit Software Company.

David joined Summit Software in April 2006 as the General Manager, managing Summit’s role as Microsoft’s authorized licensing agent for both Microsoft Visual Studio Tools for Applications (VSTA) and Microsoft Visual Basic for Applications (VBA). In his new role as CEO, David will continue to manage these businesses while executing the strategic directives set forth by the Board of Directors.

Raised in Syracuse, David graduated from Cornell University and received his MBA from Columbia Business School. David returned to Syracuse in 2005 to lead the US expansion efforts for UK-based technology merchant bank Interregnum, and previously had been an Assistant Vice-President at PaineWebber (now UBS) and Director of Business Development for GeoVideo Networks (a venture backed startup).

About Summit

Founded in 1991, Summit Software’s relationship with Microsoft dates back more than 12 years, beginning as Microsoft’s authorized licensing agent for VBA. In 2006, Summit was appointed as the authorized licensing agent for VSTA, which represents Microsoft’s strategic direction for application extensibility.

COPA-DATA now shipping VSTA

2009-04-20T15:36:00Z

Summit Software is pleased to announce that Copa-Data is now shipping Microsoft VSTA in their zenon product line.

VSTA is being used by zenon to design and generate Human Machine Interfaces and processcontrol systems which are then run in realtime environments. The sophisticated capabilities for automated engineering reduces the engineering effort required up to 90%!

VSTA, in conjunction with Microsoft VBA, provides COPA-DATA's customers maximum customization flexibility.

For more information about COPA-DATA, please visit: www.Copadata.com

Boston Software begins shipping VSTA

2009-03-04T14:39:00Z

Summit is pleased to announce that Boston Software Systems has released version 9.8 of their Boston Workstation product with VSTA integrated.

Boston Workstation is a workflow automation and integration technology providing an environment for on-demand process innovation and development, providing healthcare organizations the ability to automate common tasks through the organization.

For further information about Boston Software Systems, please see this link.

Autodesk Revit Case study published

2009-01-23T14:48:00Z

Summit is pleased to announce the publication of a case study highlighting the integration of VSTA into Autodesk Revit.

This case study focuses on the decision to integrate VSTA for Revit's end-user customization needs as VSTA met or exceeded all the required functionality. With VSTA as part of Revit, users are empowered to extend Revit to meet their own individual needs allowing them to become more productive.

A link to the Autodesk Revit case study can be found here.

Solidworks 2009 Shipping with VSTA

2008-09-12T14:09:00Z

Solidworks Corporation has integrated Microsoft Visual Studio Tools for Applications (VSTA) into its Solidworks 2009 product line as a significant enhancement to the Solidworks API.

Solidworks is a 3D mechanical CAD product used by product designers and mechanical engineers worldwide. To learn more about the features and functionality of Solidworks 2009, please see the Solidworks 2009 website.

Summit is pleased that Solidworks 2009 users now have the ability to leverage VSTA for Macro Recording and additional customization.

VSTA 2.0 RTM now available

2008-08-27T18:54:00Z

I am pleased to announce the Release to Manufacturing (RTM) of Microsoft Visual Studio Tools for Applications (VSTA) 2.0.

The VSTA 2.0 RTM bits are available from the following location:

http://www.summsoft.com/VSTAInfReq.aspx

If you have an account with Summit, please use your login credentials to access the VSTA 2.0 SDK.

If you have not registered with Summit, please do so to access the SDK.

We look forward to working with you during your evaluation and integration of VSTA 2.0.

If you have questions, please contact me directly at dschneid@summsoft.com.

David Schneid
General Manager
Summit Software Company

Autodesk Revit now shipping with VSTA

2008-04-23T18:53:00Z

Autodesk Inc. has integrated and is now shipping Microsoft Visual Studio Tools for Applications (VSTA) in its Revit 2009 product line, including Revit Architecture, Revit Structure, and Revit MEP.

Revit is architectural BIM (Building Informational Modeling) software that allows intelligent,3D and parametric object-based design.

Summit is pleased that Autodesk Revit is now using VSTA to provide their customers the ability to customize and extend the functionality of Revit.

Learn more about the integration of VSTA by Autodesk by exploring the various Revit products:

Revit Architecture, targeted at architects and building designers.

Revit Structure, targeted at structural engineers.

Revit MEP, targeted at mechanical, electrical, and plumbing engineers.

VSTA 2.0 Beta now available

2008-03-05T20:54:00Z

Summit Software is pleased to announce the availability of the Microsoft Visual Studio Tools for Applications (VSTA) 2.0 SDK Beta.

The VSTA 2.0 Beta has been released. This new release is available for download from Summit's website for authorized, registered users.

In order to access the Beta:

1) Create an account on Summit's website using a corporate email address.

2) Complete our VSTA Evaluation form

When you have completed the above steps, we will provide you with authorization and access instructions via email.

We encourage your feedback throughout your evaluation, and look forward to working with you on your VSTA 2.0 integration!

If you have previously downloaded the CTP release, you already have access to the Beta.

As a point of interest, the VSTA 2.0 Beta includes the WPF Designer

VSTA 2.0 SDK CTP Now Available

2007-12-03T18:55:00Z

Summit Software is pleased to announce the availability of the Microsoft Visual Studio Tools for Applications (VSTA) 2.0 SDK CTP.

This CTP is available for download from Summit's website for authorized, registered users.

In order to access the CTP:

1) Create an account on Summit's website using a corporate email address.

2) Complete our VSTA Evaluation form

When you have completed the above steps, we will provide you with authorization and access instructions via email.

We encourage your feedback throughout your evaluation, and look forward to working with you on your VSTA 2.0 integration!

VSTA SDK now available

2007-04-09T19:23:00Z

In conjuction with the launch of VSTA at VS Live in San Francisco, where KD Hallman, the Microsoft General Manager for VSTA, delivered a powerful keynote address, Microsoft has also launched the VSTA Developler Center (http://msdn.microsoft.com/vsta).

In addition, the VSTA SDK is now available for easy download from the Developer Center. This provides an easy to access mechanism for downloading the SDK!

Happy integration!

Customizing apps using VSTA

2006-12-07T16:00:00Z

Paul Stubbs, a program manager on the VSTA team, wrote a very interesting article published in the August 2006 MSDN magazine about VSTA. In the article, titled "Let Users Customize Your Apps With Visual Studio Tools for Applications", Paul looks at VSTA, VSTO, and VBA, and provides a useful demo of customizing a form in InfoPath 2007.

Top 20 cool new features of VSTA

2006-12-07T15:56:00Z

Paul Stubbs, a Program Manager with the VSTA team, blogs about the top 20 cool new features of VSTA.