Some vulnerabilities has been reported in Apple iOS for iPhone 4 (CDMA), which can be exploited by malicious people to compromise a vulnerable device.

1) A boundary error exists within QuickLook.

For more information see vulnerability #29 in:
SA43814

2) An integer overflow error exists within WebKit.

For more information:
SA43748

3) A use-after-free error exists within WebKit.

For more information see vulnerability #2 in:
SA44151

Successful exploitation of the vulnerabilities may allow execution of arbitrary code.

The vulnerabilities are reported in iOS for iPhone 4 (CDMA) versions 4.2.5 through 4.2.6.

Solution
Update to iOS for iPhone 4 (CDMA) 4.2.7 (downloadable and installable via iTunes).

Provided and/or discovered by
1) Charlie Miller and Dion Blazakis via ZDI.
2) Vincenzo Iozzo, Willem Pinckaers, and Ralf-Philipp Weinmann via ZDI.
3) Vupen via ZDI. The vendor also credits Martin Barbella.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Apple:
http://support.apple.com/kb/HT4607

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-11-109/
http://www.zerodayinitiative.com/advisories/ZDI-11-104/
http://www.zerodayinitiative.com/advisories/ZDI-11-135/

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers