From the recently disclosed [Zend-mail remote code execution vulnerability][1]:

 
Affected Zend Framework versions: 

Zend Framework < 2.4.11    Remote Code Execution (CVE-2016-10034)

zend-mail < 2.4.11 

zend-mail < 2.7.2 

Should I be worried about this if Magento uses Zend Framework? Does Magento take proper precautions in sanitizing all types of email forms out-of-the-box?

  [1]: http://legalhackers.com/advisories/ZendFramework-Exploit-ZendMail-Remote-Code-Exec-CVE-2016-10034-Vuln.html