Multiple vulnerabilities and a weakness have been reported in Apple iOS, which can be exploited by malicious people to bypass certain security restrictions or to compromise a user's system.

1) An error can result in VoiceOver not announcing the use of location services of an application.

2) An error within the handling of invalid certificates in FaceTime can be exploited to redirect FaceTime calls.

3) An unspecified error within the processing of TIFF images in ImageIO can be exploited to corrupt memory and potentially execute arbitrary code via a specially crafted TIFF image.

4) An error within the processing of GIF images in ImageIO can be exploited to cause a buffer overflow and potentially execute arbitrary code via a specially crafted GIF image.

5) Multiple vulnerabilities in WebKit can be exploited by malicious people to bypass certain security restrictions or compromise a user's system.

For more information:
SA40105
SA40664

6) A double free error in WebKit when rendering inline elements can be exploited to corrupt memory and execute arbitrary code when a user visits a specially crafted web site.

7) A use-after-free error in WebKit when handling selections can be exploited to corrupt memory and execute arbitrary code when a user visits a specially crafted web site.

8) An unspecified error in WebKit when rendering HTML object outlines can be exploited to corrupt memory and potentially execute arbitrary code when a user visits a specially crafted web site.

9) An unspecified error in WebKit when handling form menus can be exploited to corrupt memory and potentially execute arbitrary code when a user visits a specially crafted web site.

10) A use-after-free error in WebKit within the handling of scrollbars can be exploited to corrupt memory and execute arbitrary code when a user visits a specially crafted web site.

Solution
Update to to iOS 4.1 (downloadable and installable via iTunes).

Provided and/or discovered by
The vendor credits:
1) Robin Kipp, Forever Living Products Europe
2) Aaron Sigel, vtty.com
4) Tom Ferris, Adobe PSIRT
6) James Robinson, Google, Inc
7) Ojan Vafai, Google, Inc
8) Jose A. Vazquez, spa-s3c.blogspot.com
9) Csaba Osztrogonac, University of Szeged
10) Tony Chang, Google, Inc

Original Advisory
Apple:
http://support.apple.com/kb/HT4334

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers