Why does Stack Overflow scan your resume for viruses?

5 points by chrisstpierre 7 years ago | 3 comments

I just uploaded my resume to Stack Overflow, and it shows "scanning for viruses". Is it really necessary to scan a pdf for viruses?

suramya_tomar 7 years ago |

Yes, because there are ways to trigger a malware install or Viruses using a PDF files.

Example:

* https://www.welivesecurity.com/2018/05/15/tale-two-zero-days... (a remote-code execution vulnerability in Adobe Reader and a privilege escalation vulnerability in Microsoft Windows triggered via PDF)

LiamPa 7 years ago |

Any file uploaded should be scanned especially when you are uploading something which is then downloadable by someone else such as this example.

detaro 7 years ago |

PDFs have been a major malware vector.