TPTI-07-10: Centennial Software XferWan.exe Stack Overflow Vulne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