Apple has released iOS 4.3.4 for the iPhone (GSM model), iPod touch, and iPad, and iOS 4.2.9 for the iPhone (CDMA model) to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code or operate with escalated privileges.
US-CERT encourages users and administrators to review Apple Support Articles [HT4802](<http://support.apple.com/kb/HT4802>) and [HT4803](<http://support.apple.com/kb/HT4803>) and apply any necessary updates to help mitigate the risks.
This product is provided subject to this Notification and this [Privacy & Use](<https://www.dhs.gov/privacy-policy>) policy.
**Please share your thoughts.**
We recently updated our anonymous [product survey](<https://www.surveymonkey.com/r/CISA-cyber-survey?product=https://us-cert.cisa.gov/ncas/current-activity/2011/07/18/Apple-Releases-iOS-434-and-iOS-429>); we'd welcome your feedback.
{"id": "CISA:125B76DE4F71FB6163F62A788160130D", "type": "cisa", "bulletinFamily": "info", "title": "Apple Releases iOS 4.3.4 and iOS 4.2.9", "description": "Apple has released iOS 4.3.4 for the iPhone (GSM model), iPod touch, and iPad, and iOS 4.2.9 for the iPhone (CDMA model) to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code or operate with escalated privileges.\n\nUS-CERT encourages users and administrators to review Apple Support Articles [HT4802](<http://support.apple.com/kb/HT4802>) and [HT4803](<http://support.apple.com/kb/HT4803>) and apply any necessary updates to help mitigate the risks.\n\nThis product is provided subject to this Notification and this [Privacy & Use](<https://www.dhs.gov/privacy-policy>) policy.\n\n**Please share your thoughts.**\n\nWe recently updated our anonymous [product survey](<https://www.surveymonkey.com/r/CISA-cyber-survey?product=https://us-cert.cisa.gov/ncas/current-activity/2011/07/18/Apple-Releases-iOS-434-and-iOS-429>); we'd welcome your feedback.\n", "published": "2011-07-18T00:00:00", "modified": "2012-10-23T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://us-cert.cisa.gov/ncas/current-activity/2011/07/18/Apple-Releases-iOS-434-and-iOS-429", "reporter": "CISA", "references": ["http://support.apple.com/kb/HT4802", "http://support.apple.com/kb/HT4803"], "cvelist": [], "lastseen": "2021-02-24T18:08:39", "viewCount": 4, "enchantments": {"dependencies": {}, "score": {"value": 1.6, "vector": "NONE"}, "backreferences": {"references": [{"type": "ics", "idList": ["ICSA-20-282-02"]}, {"type": "threatpost", "idList": ["THREATPOST:F7C1C6A7D07F7CFA8DFDD80051147A3B"]}]}, "exploitation": null, "vulnersScore": 1.6}, "wildExploited": false, "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"wildexploited": 1647356731, "dependencies": 1647589307, "score": 1659743467, "epss": 1679050336}, "_internal": {"wildexploited_cvelist": null}}