TPTI-07-12: Multiple Vendor Progress Server Heap Overflow Vulner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==