Apple has just released the iOS 4.3.4 & iOS 4.2.9(Verizon Version) update which was announced by Apple as a fix to the new PDF vulnerability. Jailbreaking special website was using this exploit in the system to gain access and jailbreak the devices. So if you are Jailbroken user, Stay Away !! For others the update is a must, especially if you browse a lot on your phone. Apple has plugged three holes here. Two of them sit in CoreGraphics, where the way FreeType handles TrueType and Type 1 fonts could be abused so that simply opening a rigged PDF runs code on your device. The third one is in IOMobileFrameBuffer, and thats the nasty part, because it let that code climb up to system privileges. Apple credits comex for two of the three, which is funny since hes the man behind jailbreakme.com.
Theres nothing new in terms of features here. iOS 4.3.4 is build 8K2 and its up for the GSM iPhone 4, iPhone 3GS, iPad, iPad 2 and the 3rd and 4th gen iPod touch. The CDMA iPhone 4 gets 4.2.9 (8E501) instead. Plug into iTunes and hit Check For Update, or grab the ipsw from the links below and Shift/Option click Update instead.
And if you are jailbroken and still want that PDF hole closed, comex put up PDF Patcher 2 on Cydia a while back. That does the job without killing your jailbreak. Links are below.
Partly reconstructed with AI. This post’s full text was lost when the site went offline. Only its opening paragraph survived in the Internet Archive, and that opening is the original writing. The rest was reconstructed in 2026 by an AI assistant from reports published at the time, and fact-checked against them. Sources used: support.apple.com, appleinsider.com, macworld.com, osxdaily.com, techcrunch.com.
