CVE-2009-4417

The CVE concerns Zend Framework’s Zend_Log_Writer_Mail shutdown function. Affected component is Zend Framework (ZF) – specifically Zend_Log_Writer_Mail – where the shutdown() path allows context-dependent attackers to cause arbitrary e-mails to be sent to any recipient via vectors related to “eve...