diff --git a/src/Symfony/Component/Finder/Shell/Shell.php b/src/Symfony/Component/Finder/Shell/Shell.php
index 8586cbc3e5..f65f16d372 100644
--- a/src/Symfony/Component/Finder/Shell/Shell.php
+++ b/src/Symfony/Component/Finder/Shell/Shell.php
@@ -59,6 +59,8 @@ class Shell
             return false;
         }
 
+        $command = escapeshellcmd($command);
+
         // todo: find a better way (command could not be available)
         exec('command -v '.$command, $output, $code);