Multiple vulnerabilities have been reported in Apple iOS, which can be exploited by malicious people to conduct spoofing attacks, bypass certain security restrictions, and compromise a user's system.

1) An error within Safari when opening a new window using "window.open()" can be exploited to display arbitrary content while showing the URL of a trusted web site in the address bar.

This vulnerability is confirmed in iOS version 5.1 (9B176) on iPhone 4 and 4th generation iPod touch. Other versions and devices may also be affected.

2) Some vulnerabilities are caused due to a bundled vulnerable version of WebKit.

For more information:
SA48321
SA48512

3) An error within the WebKit component can be exploited to corrupt memory.

Successful exploitation of vulnerabilities #2 and #3 may allow execution of arbitrary code.

Solution
Apply iOS 5.1.1 Software Update.

Provided and/or discovered by
1) David Vieira-Kurz, MajorSecurity.
3) The vendor credits Adam Barth and Abhishek Arya of the Google Chrome Security Team.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MajorSecurity:
http://archives.neohapsis.com/archives/bugtraq/2012-03/0095.html

Apple:
http://support.apple.com/kb/HT5278

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers