What is meta? ×
Meta Stack Exchange is where users like you discuss bugs, features, and support issues that affect the software powering all 129 Stack Exchange communities.

I have no idea why, first time I see that thing happens on SE network, question:

Code injection ... what could be the security leak?

Picture:

enter image description here

share|improve this question
4  
It's almost certainly just being overly sensitive. –  Servy Mar 19 '13 at 20:59
    
@Servy, well... I can't see the content so I can't tell... what is in that question? –  user209407 Mar 19 '13 at 21:00
    
Probably the antivirus just look for "#8f4d8e#" on web page and when found it think it's a virus... (now this page will also be a "virus") –  Shadow Wizard Mar 19 '13 at 21:03
3  
It looks like it has a malicious script posted as code, so it wouldn't be harmful to your system to view the page (unless you explicitly copied the code to the console and executed it) but it's at least understandable that AVG would try to protect you from this. –  Servy Mar 19 '13 at 21:03
    
@ShaWizDowArd It could be looking at any number of sections of that script,I know that's not what I'd choose as a likely pattern to match. –  Servy Mar 19 '13 at 21:05

1 Answer 1

up vote 13 down vote accepted

The question (now deleted) contained a copy-paste of some exploit code that a user found on his website. The exploit code matches the Blackhole Exploit Kit, which AVG detected as a threat (which it technically is, though it is inert as a StackOverflow question).

The kit's JavaScript components are legitimately malicious if inserted on an HTML page, so AVG isn't necessarily wrong in the detection -- it can't be expected to tell whether malicious code is being safely handled in a <pre> block or not.

share|improve this answer
3  
For those interested, here's the script that triggered the antivirus: pastebin.com/964UNjem (just don't run the code!) –  Richard J. Ross III Mar 19 '13 at 21:08

You must log in to answer this question.