Meta Stack Exchange is where users like you discuss bugs, features, and support issues that affect the software powering all 158 Stack Exchange communities.

What is meta?
Here's how it works:
  1. Any Stack Exchange user can ask a question
  2. The community provides support, votes on ideas, and reports bugs
  3. Your voice helps shape the way Stack Exchange operates

I have no idea why, first time I see that thing happens on SE network, question:

Code injection ... what could be the security leak?


enter image description here

share|improve this question
It's almost certainly just being overly sensitive. – Servy Mar 19 '13 at 20:59
@Servy, well... I can't see the content so I can't tell... what is in that question? – user209407 Mar 19 '13 at 21:00
Probably the antivirus just look for "#8f4d8e#" on web page and when found it think it's a virus... (now this page will also be a "virus") – Shadow Wizard Mar 19 '13 at 21:03
It looks like it has a malicious script posted as code, so it wouldn't be harmful to your system to view the page (unless you explicitly copied the code to the console and executed it) but it's at least understandable that AVG would try to protect you from this. – Servy Mar 19 '13 at 21:03
@ShaWizDowArd It could be looking at any number of sections of that script,I know that's not what I'd choose as a likely pattern to match. – Servy Mar 19 '13 at 21:05
up vote 13 down vote accepted

The question (now deleted) contained a copy-paste of some exploit code that a user found on his website. The exploit code matches the Blackhole Exploit Kit, which AVG detected as a threat (which it technically is, though it is inert as a StackOverflow question).

The kit's JavaScript components are legitimately malicious if inserted on an HTML page, so AVG isn't necessarily wrong in the detection -- it can't be expected to tell whether malicious code is being safely handled in a <pre> block or not.

share|improve this answer
For those interested, here's the script that triggered the antivirus: (just don't run the code!) – Richard J. Ross III Mar 19 '13 at 21:08

You must log in to answer this question.