Secunia

Some vulnerabilities and weaknesses have been reported in Apple iPhone and iPod touch, which can be exploited by malicious people to bypass certain security restrictions, disclose sensitive information, or potentially compromise a user's system.

1) An input validation error in CoreAudio can potentially be exploited to compromise a user's system.

For more information see vulnerability #1 in:
SA38241

2) A vulnerability in ImageIO can be exploited to potentially compromise a user's system.

For more information:
SA35515

3) An error in the handling of a certain USB control message can be exploited to bypass the passcode and access the user's data.

Successful exploitation requires physical access to the device.

4) An error in Webkit can be exploited to disclose sensitive information, cause a crash, or potentially compromise user's system.

For more information see vulnerability #4 in:
SA37346

5) An error in WebKit can be exploited to bypass remote image loading restrictions.

For more information see vulnerability #5 in:
SA37346

Solution
Update to iPhone OS 3.1.3 or iPhone OS for iPod touch 3.1.3 (downloadable and installable via iTunes).

Provided and/or discovered by
1) Tobias Klein, trapkit.de

The vendor credits:
4) Michal Zalewski, Google Inc.

Changelog
Further details available in Customer Area

Original Advisory
Apple:
http://support.apple.com/kb/HT4013

Tobias Klein:
http://trapkit.de/advisories/TKADV2010-002.txt

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area